Trying Maester on a tenant with Microsoft Entra ID Free and on-site Active Directory only

[SomewhereinSC]

...Maester NEWB here...
I'm trying to determine the expected outcome based on my limited Entra licensing ( Microsoft Entra ID Free) and the fact we are not syncing our on-site Active Directory. I ran and installed Maester and got the following results.

Total tests: 282 Passed 37 Failed 36 Not Tested 209

Also received this error in the PowerShell window
WARNING: Skipping eligible roles as required Graph permission 'RoleEligibilitySchedule.ReadWrite.Directory' was not present.

I'm of course am going to work on the Failed items, but wanted to know if the 209 was expected, or how to see why they did not run.

[soulemike]

Hey @SomewhereinSC, the majority of the included tests will check that you have a connected session to the service necessary for the test and check if your current licenses would allow you access to the capabilities in the test.

Most tests will tell you why they were skipped in the results report.

Just as an aside to the idea above, we published a blog around controls. https://maester.dev/blog/compensating-controls

[SamErde]

To add to @soulemike's answer, you can resolve the warning you saw (WARNING: Skipping eligible roles as required Graph permission 'RoleEligibilitySchedule.ReadWrite.Directory' was not present.) By adding the -Privileged parameter to your Connect-Maester command (only required once). This will trigger a prompt to approve that permission.