fix confidential client auth on china cloud

Author: jazuntee

src/Invoke-AADAssessmentDataCollection.ps1

@@ -184,7 +184,7 @@ function Invoke-AADAssessmentDataCollection {
             Write-AppInsightsTrace ("{0} - Directory Role Assignments" -f $MyInvocation.MyCommand.Name) -SeverityLevel Verbose -IncludeProcessStatistics -OrderedProperties (Get-ReferencedIdCacheDetail $ReferencedIdCache)
             Write-Progress -Id 0 -Activity ('Microsoft Azure AD Assessment - {0}' -f $InitialTenantDomain) -Status 'Directory Role Assignments' -PercentComplete 30
 
-            if ($script:ConnectState.CloudEnvironment -in 'USGov', 'USGovDoD') {
+            if ($script:ConnectState.CloudEnvironment -in 'USGov', 'USGovDoD', 'China') {
                 ## MS Graph endpoint roleManagement/directory/roleAssignments must still have filter on Gov tenants
                 $roleDefinitions | Get-MsGraphResults 'roleManagement/directory/roleAssignments' -Select 'id,directoryScopeId,principalId' -Filter "roleDefinitionId eq '{0}'" -QueryParameters @{ '$expand' = 'roleDefinition($select=id,templateId,displayName)' } `
                 | Add-AadReferencesToCache -Type roleAssignments -ReferencedIdCache $ReferencedIdCache -PassThru `

src/internal/Confirm-ModuleAuthentication.ps1

@@ -93,7 +93,7 @@ function Confirm-ModuleAuthentication {
         Write-Warning 'Using a confidential client is non-interactive and requires that the necessary scopes/permissions be added to the application or have permissions on-behalf-of a user.'
         $Stopwatch = [System.Diagnostics.Stopwatch]::StartNew()
         try {
-            $MsGraphToken = Get-MsalToken -ConfidentialClientApplication $ClientApplication -Scopes 'https://graph.microsoft.com/.default' -CorrelationId $CorrelationId -Verbose:$false -ErrorAction Stop
+            $MsGraphToken = Get-MsalToken -ConfidentialClientApplication $ClientApplication -Scopes ([IO.Path]::Combine($script:mapMgEnvironmentToMgEndpoint[$CloudEnvironment], '.default')) -CorrelationId $CorrelationId -Verbose:$false -ErrorAction Stop
         }
         catch { throw }
         finally {