Running New-PnPTerm after connection with -ClientId and -ClientSecret fails

[michaelgalyon]

Hi,

I'm trying to setup an Azure Function that adds entries to a Term Set in the Managed Metadata service based off an item being created on a list. I'm having a hell of a time getting the authentication to work. This fails with the same error whether I run it locally or if I run it in the Azure Function.

After adding app@sharepoint to the term store administrators group, I'm now able to use Get-PnPTerm to return the term id. However, I'm still getting a "New-PnPTerm : Access denied. You do not have permission to perform this action or access this resource." error when trying to create a new term. The Enterprise Application I'm connecting as has the TermStore.ReadWrite.All permission. I've also tried adding the term connecting to both the Site Collection that I'm working off of, as well as the Tenant-admin.sharepoint.com site.

I'm not sure what I'm doing wrong, but I would love any guidance on this.

Thanks

[michaelgalyon]

I figured it out! I was missing the taxonomy appreg in the first part of this article: https://www.techmikael.com/2018/08/modifying-terms-using-app-only-tokens.html (though you also need to grant the app@sharepoint added to term store admins). Hope this helps someone use the App-Only calls with Managed Metadata.