Need help with getting started

[rforester-inv]

Hello. I went through all the preliminary steps for getting the project started but I'm sure I'm missing something here.

Created Azure App Registration with permissions
DeviceManagementApps.ReadWrite.All
DeviceManagementConfiguration.ReadWrite.All
DeviceManagementServiceConfig.ReadWrite.All
DeviceManagementManagedDevices.ReadWrite.All
Group.Read.All
Policy.Read.All
Policy.ReadWrite.ConditionalAccess

Installed Python and enabled it to set the path
Installed IntuneCD with pip install IntuneCD
--upgrade works
--help works

Connected to MSGraph as Global Admin in PowerShell

But when I try to run the following, I am getting errors:

C:\Windows\system32>IntuneCD-startbackup -m 1 -o yaml -p C:\IntuneCD -i
Traceback (most recent call last):
File "", line 198, in _run_module_as_main
File "", line 88, in run_code
File "C:\Users\MODAdministrator\AppData\Local\Programs\Python\Python311\Scripts\IntuneCD-startbackup.exe_main.py", line 7, in
File "C:\Users\MODAdministrator\AppData\Local\Programs\Python\Python311\Lib\site-packages\IntuneCD\run_backup.py", line 164, in start
token = getAuth(
^^^^^^^^
File "C:\Users\MODAdministrator\AppData\Local\Programs\Python\Python311\Lib\site-packages\IntuneCD\get_authparams.py", line 44, in getAuth
raise Exception("One or more os.environ variables not set")
Exception: One or more os.environ variables not set

Not sure what os.environ variables it is talking about.

I found this comment on another discussion and added it: configure PYTHONUTF8 to 1

[almenscorner]

The required env vars when running in interactive mode are TENANT_NAME and CLIENT_ID. You must set them as environment variables on your machine and additionally configure a redirect on the app registration when running with -i https://github.com/almenscorner/IntuneCD/wiki/Authentication#interactive

[rforester-inv]

Thank you! I configured the environment variables as you suggested and now, I get the login, which was successful and was told to close the tab. But in the CMD window I am now getting this:

C:\Windows\system32>IntuneCD-startbackup -m 1 -o yaml -p C:\IntuneCD -i
Traceback (most recent call last):
File "", line 198, in _run_module_as_main
File "", line 88, in run_code
File "C:\Users\MODAdministrator\AppData\Local\Programs\Python\Python311\Scripts\IntuneCD-startbackup.exe_main.py", line 7, in
File "C:\Users\MODAdministrator\AppData\Local\Programs\Python\Python311\Lib\site-packages\IntuneCD\run_backup.py", line 379, in start
run_backup(args.path, args.output, exclude, token, args.prefix)
File "C:\Users\MODAdministrator\AppData\Local\Programs\Python\Python311\Lib\site-packages\IntuneCD\run_backup.py", line 178, in run_backup
results.append(savebackup(path, output, exclude, token, prefix))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "C:\Users\MODAdministrator\AppData\Local\Programs\Python\Python311\Lib\site-packages\IntuneCD\backup_appConfiguration.py", line 37, in savebackup
data = makeapirequest(ENDPOINT, token)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "C:\Users\MODAdministrator\AppData\Local\Programs\Python\Python311\Lib\site-packages\IntuneCD\graph_request.py", line 24, in makeapirequest
"Authorization": "Bearer {0}".format(token["access_token"]),
~~~~~^^^^^^^^^^^^^^^^
KeyError: 'access_token'

[almenscorner]

Sorry I missed it, when running with -i do not specify -m

[rforester-inv]

Thanks again. The difference is when using -i I am prompted for credentials where -m I am not. But I am still getting the same error with either, which tells me I have something else wrong here.

C:\Windows\system32>IntuneCD-startbackup -o yaml -p C:\IntuneCD -i
Traceback (most recent call last):
File "", line 198, in _run_module_as_main
File "", line 88, in run_code
File "C:\Users\MODAdministrator\AppData\Local\Programs\Python\Python311\Scripts\IntuneCD-startbackup.exe_main.py", line 7, in
File "C:\Users\MODAdministrator\AppData\Local\Programs\Python\Python311\Lib\site-packages\IntuneCD\run_backup.py", line 379, in start
run_backup(args.path, args.output, exclude, token, args.prefix)
File "C:\Users\MODAdministrator\AppData\Local\Programs\Python\Python311\Lib\site-packages\IntuneCD\run_backup.py", line 178, in run_backup
results.append(savebackup(path, output, exclude, token, prefix))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "C:\Users\MODAdministrator\AppData\Local\Programs\Python\Python311\Lib\site-packages\IntuneCD\backup_appConfiguration.py", line 37, in savebackup
data = makeapirequest(ENDPOINT, token)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "C:\Users\MODAdministrator\AppData\Local\Programs\Python\Python311\Lib\site-packages\IntuneCD\graph_request.py", line 24, in makeapirequest
"Authorization": "Bearer {0}".format(token["access_token"]),
~~~~~^^^^^^^^^^^^^^^^
KeyError: 'access_token'

[rforester-inv]

Hello Tobias. It looks like I'm ok now. It turns out I had the wrong secret value in my environment variables.

C:\Windows\system32>IntuneCD-startbackup -m 1 -o yaml -p C:\IntuneCD
Backing up App Protection: iOS apps data leak prevention policy
Backing up App Protection: Android apps data leak prevention policy
Resource not found in Microsoft Graph: https://graph.microsoft.com/beta/deviceManagement/applePushNotificationCertificate
Backing up Application: Adobe Acrobat Reader for Intune Android (Deprecated)
Backing up Application: Adobe Acrobat Reader for Microsoft Intune (Deprecated)
Backing up Application: Excel
Backing up Application: Excel
Backing up Application: Managed Browser
Backing up Application: Managed Browser
Backing up Application: OneDrive
Backing up Application: OneDrive
Backing up Application: Outlook
Backing up Application: Outlook
Backing up Application: PowerPoint
Backing up Application: PowerPoint
Backing up Application: Word
Backing up Application: Word
Backing up compliance policy: Contoso MDM Compliance Policy for iOS
Backing up Device Management Settings
Backing up profile: iOS device restriction to block Game Center
Backing up profile: Win10-Device Restrictions
Backing up profile: Win10-DeviceConfig-Restrictions
Backing up profile: Win10-Endpoint Protection-Lock Screen
Backing up profile: Win10-Shared Multi-user Device
Backing up Autopilot enrollment profile: Autopilot Profile
Backing up Autopilot enrollment profile: Azure AD Join
Backing up Enrollment Status Page: All users and all devices
Backing up Enrollment Config Limit: All users and all devices
Backing up Enrollment Config Platform Restrictions: All users and all devices
Backing up Enrollment Config Windows Hello For Business: All users and all devices
Backing up Managed Google Play:
Backing up Conditional Access policy: Exchange Online Requires Compliant Device
Backing up Conditional Access policy: Office 365 App Control
Backing up Conditional Access policy: Logon Policy

[almenscorner]

Happy to hear you were able to get going :)