The identity of the policy scope is not a security principal
What causes it and how to fix it:
- ApplicationAccessPolicy won't scope to a shared mailbox — use a mail-enabled security group"not a security principal"; scope app-only Mail.Send to a mail-enabled security groupCause and fix →