Getting SharePoint Online site permissions via PnP PowerShell

[rakheshster]

I registered an app registration via Register-PnPAzureADApp which has application level Sites.FullControl.All permissions and an admin has consented to it too.

I then connected using this App Registration: Connect-PnPOnline -ClientId xxx -Url https://tenant.sharepoint.com" -Tenant tenant.onmicrosoft.com -CertificatePath 'path\to\cert.pfx. This too succeeds.

My end goal is to have another app registration with Sites.Selected permissions so I can limit it to specific sites. Before doing that if I were to try and look at the existing permissions of a site via Get-PnPAzureADAppSitePermission -Site https://tenant.sharepoint.com/sites/sitename it errors:

Get-PnPAzureADAppSitePermission: {"error":{"code":"accessDenied","message":"Access denied",...

Same deal if I try and set permissions too via Grant-PnPAzureADAppSitePermission.

Am I missing something here?

Thanks,
Rakhesh

[rakheshster]

Found the issue. The permissions were wrong. I had to add Sites.FullControl.All under Microsoft Graph.