EXO: Some resources stopped working with latest release #6753
Description
Description of the issue
@FabienTschanz I wanted to test latest release and noticed that some of the EXO resources stopped working, this is not the certificate issue that was present on MSCloudLoginAssistant, I already tested both 1.1.54 and 1.1.56 and everything works fine, it's just something that changed in M365DSC between 1.25.1112.1 (which works and with both MSCloudLoginAssistant versions mentioned) and 1.25.1203.2 (which doesn't). See errors below when I try to export these resources MSFT_EXOSecOpsOverrideRule, MSFT_EXOPhishSimOverrideRule, MSFT_EXOMigration and MSFT_EXOExternalInOutlook.
2025-12-06T14:07:41.0046103Z { ||Some of the parameters specified with the "Get-ExoSecOpsOverrideRule" cmdlet aren't present in the role definition for the current user. Check the management roles assigned to you, and try again. } \ at Write-ErrorMessage<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 542
2025-12-06T14:07:41.0053578Z \ at CheckRetryAndHandleWaitTime<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1191
2025-12-06T14:07:41.0061719Z \ at Execute-Command<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1545
2025-12-06T14:07:41.0070727Z \ at script:Get-ExoSecOpsOverrideRule<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 13402
2025-12-06T14:07:41.0080474Z \ at Export-TargetResource, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\DSCResources\MSFT_EXOSecOpsOverrideRule\MSFT_EXOSecOpsOverrideRule.psm1: line 316
2025-12-06T14:07:41.0083579Z \ at <ScriptBlock>, <No file>: line 105
2025-12-06T14:07:41.0091724Z \ at Start-M365DSCConfigurationExtract, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCReverse.psm1: line 815
2025-12-06T14:07:41.0094861Z \ at Export-M365DSCConfiguration, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCUtil.psm1: line 1726
2025-12-06T14:07:41.0102544Z \ at <ScriptBlock>, D:\a\_work\1\s\Source\Scripts\Exporter.ps1: line 177
2025-12-06T14:07:41.0105595Z \ at <ScriptBlock>, D:\a\_work\_temp\7be1aedf-7819-473e-832b-cd7373669304.ps1: line 39
2025-12-06T14:07:41.0114122Z \ at <ScriptBlock>, <No file>: line 1
2025-12-06T14:07:41.0114474Z
2025-12-06T14:07:41.0121693Z TenantId: REDACTED.onmicrosoft.com
2025-12-06T14:07:41.0124777Z [2025-12-06 14:07:40] - Error during Export:
2025-12-06T14:07:41.0128924Z
2025-12-06T14:07:41.0134850Z { ||Some of the parameters specified with the "Get-ExoPhishSimOverrideRule" cmdlet aren't present in the role definition for the current user. Check the management roles assigned to you, and try again. } \ at Write-ErrorMessage<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 542
2025-12-06T14:07:41.0142321Z \ at CheckRetryAndHandleWaitTime<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1191
2025-12-06T14:07:41.0145458Z \ at Execute-Command<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1545
2025-12-06T14:07:41.0153194Z \ at script:Get-ExoPhishSimOverrideRule<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 13278
2025-12-06T14:07:41.0157149Z \ at Export-TargetResource, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\DSCResources\MSFT_EXOPhishSimOverrideRule\MSFT_EXOPhishSimOverrideRule.psm1: line 377
2025-12-06T14:07:41.0169113Z \ at <ScriptBlock>, <No file>: line 105
2025-12-06T14:07:41.0173618Z \ at Start-M365DSCConfigurationExtract, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCReverse.psm1: line 815
2025-12-06T14:07:41.0195378Z \ at Export-M365DSCConfiguration, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCUtil.psm1: line 1726
2025-12-06T14:07:41.0196019Z \ at <ScriptBlock>, D:\a\_work\1\s\Source\Scripts\Exporter.ps1: line 177
2025-12-06T14:07:41.0199860Z \ at <ScriptBlock>, D:\a\_work\_temp\7be1aedf-7819-473e-832b-cd7373669304.ps1: line 39
2025-12-06T14:07:41.0215370Z \ at <ScriptBlock>, <No file>: line 1
2025-12-06T14:07:41.0223631Z
2025-12-06T14:07:41.0227221Z TenantId: REDACTED.onmicrosoft.com
2025-12-06T14:07:41.0234049Z [2025-12-06 14:07:40] - Error during Export:
2025-12-06T14:07:41.0238588Z
2025-12-06T14:07:41.0257558Z { ||Cannot open mailbox. Server = PR3PR06MB6827.eurprd06.prod.outlook.com, mdbGuid = 30e8b223-be87-4af9-9f9b-ac4a2e70672e, maiboxGuid = 0960bf6c-3e4c-4734-be97-746f34845a0b } \ at Write-ErrorMessage<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 542
2025-12-06T14:07:41.0303030Z \ at CheckRetryAndHandleWaitTime<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1191
2025-12-06T14:07:41.0306110Z \ at Execute-Command<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1545
2025-12-06T14:07:41.0314060Z \ at script:Get-MigrationBatch<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 19010
2025-12-06T14:07:41.0317126Z \ at Export-TargetResource, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\DSCResources\MSFT_EXOMigration\MSFT_EXOMigration.psm1: line 541
2025-12-06T14:07:41.0324873Z \ at <ScriptBlock>, <No file>: line 105
2025-12-06T14:07:41.0327956Z \ at Start-M365DSCConfigurationExtract, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCReverse.psm1: line 815
2025-12-06T14:07:41.0334314Z \ at Export-M365DSCConfiguration, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCUtil.psm1: line 1726
2025-12-06T14:07:41.0339721Z \ at <ScriptBlock>, D:\a\_work\1\s\Source\Scripts\Exporter.ps1: line 177
2025-12-06T14:07:41.0347301Z \ at <ScriptBlock>, D:\a\_work\_temp\7be1aedf-7819-473e-832b-cd7373669304.ps1: line 39
2025-12-06T14:07:41.0350249Z \ at <ScriptBlock>, <No file>: line 1
2025-12-06T14:07:41.0354253Z
2025-12-06T14:07:41.0359588Z TenantId: REDACTED.onmicrosoft.com
2025-12-06T14:07:41.0368394Z [2025-12-06 14:07:40] - Error during Export:
2025-12-06T14:07:41.0368741Z
2025-12-06T14:07:41.0374333Z { ||Some of the parameters specified with the "Get-ExternalInOutlook" cmdlet aren't present in the role definition for the current user. Check the management roles assigned to you, and try again. } \ at Write-ErrorMessage<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 542
2025-12-06T14:07:41.0379752Z \ at CheckRetryAndHandleWaitTime<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1191
2025-12-06T14:07:41.0417436Z \ at Execute-Command<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1545
2025-12-06T14:07:41.0418170Z \ at script:Get-ExternalInOutlook<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 13569
2025-12-06T14:07:41.0420808Z \ at Export-TargetResource, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\DSCResources\MSFT_EXOExternalInOutlook\MSFT_EXOExternalInOutlook.psm1: line 328
2025-12-06T14:07:41.0453259Z \ at <ScriptBlock>, <No file>: line 105
2025-12-06T14:07:41.0453775Z \ at Start-M365DSCConfigurationExtract, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCReverse.psm1: line 815
2025-12-06T14:07:41.0454249Z \ at Export-M365DSCConfiguration, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCUtil.psm1: line 1726
2025-12-06T14:07:41.0454622Z \ at <ScriptBlock>, D:\a\_work\1\s\Source\Scripts\Exporter.ps1: line 177
2025-12-06T14:07:41.0454982Z \ at <ScriptBlock>, D:\a\_work\_temp\7be1aedf-7819-473e-832b-cd7373669304.ps1: line 39
2025-12-06T14:07:41.0455386Z \ at <ScriptBlock>, <No file>: line 1
2025-12-06T14:07:41.0455592Z Microsoft 365 DSC Version
1.25.1203.2
Which workloads are affected
Exchange Online
The DSC configuration
N/AVerbose logs showing the problem
2025-12-06T14:07:41.0046103Z { ||Some of the parameters specified with the "Get-ExoSecOpsOverrideRule" cmdlet aren't present in the role definition for the current user. Check the management roles assigned to you, and try again. } \ at Write-ErrorMessage<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 542
2025-12-06T14:07:41.0053578Z \ at CheckRetryAndHandleWaitTime<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1191
2025-12-06T14:07:41.0061719Z \ at Execute-Command<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1545
2025-12-06T14:07:41.0070727Z \ at script:Get-ExoSecOpsOverrideRule<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 13402
2025-12-06T14:07:41.0080474Z \ at Export-TargetResource, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\DSCResources\MSFT_EXOSecOpsOverrideRule\MSFT_EXOSecOpsOverrideRule.psm1: line 316
2025-12-06T14:07:41.0083579Z \ at <ScriptBlock>, <No file>: line 105
2025-12-06T14:07:41.0091724Z \ at Start-M365DSCConfigurationExtract, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCReverse.psm1: line 815
2025-12-06T14:07:41.0094861Z \ at Export-M365DSCConfiguration, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCUtil.psm1: line 1726
2025-12-06T14:07:41.0102544Z \ at <ScriptBlock>, D:\a\_work\1\s\Source\Scripts\Exporter.ps1: line 177
2025-12-06T14:07:41.0105595Z \ at <ScriptBlock>, D:\a\_work\_temp\7be1aedf-7819-473e-832b-cd7373669304.ps1: line 39
2025-12-06T14:07:41.0114122Z \ at <ScriptBlock>, <No file>: line 1
2025-12-06T14:07:41.0114474Z
2025-12-06T14:07:41.0121693Z TenantId: REDACTED.onmicrosoft.com
2025-12-06T14:07:41.0124777Z [2025-12-06 14:07:40] - Error during Export:
2025-12-06T14:07:41.0128924Z
2025-12-06T14:07:41.0134850Z { ||Some of the parameters specified with the "Get-ExoPhishSimOverrideRule" cmdlet aren't present in the role definition for the current user. Check the management roles assigned to you, and try again. } \ at Write-ErrorMessage<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 542
2025-12-06T14:07:41.0142321Z \ at CheckRetryAndHandleWaitTime<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1191
2025-12-06T14:07:41.0145458Z \ at Execute-Command<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1545
2025-12-06T14:07:41.0153194Z \ at script:Get-ExoPhishSimOverrideRule<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 13278
2025-12-06T14:07:41.0157149Z \ at Export-TargetResource, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\DSCResources\MSFT_EXOPhishSimOverrideRule\MSFT_EXOPhishSimOverrideRule.psm1: line 377
2025-12-06T14:07:41.0169113Z \ at <ScriptBlock>, <No file>: line 105
2025-12-06T14:07:41.0173618Z \ at Start-M365DSCConfigurationExtract, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCReverse.psm1: line 815
2025-12-06T14:07:41.0195378Z \ at Export-M365DSCConfiguration, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCUtil.psm1: line 1726
2025-12-06T14:07:41.0196019Z \ at <ScriptBlock>, D:\a\_work\1\s\Source\Scripts\Exporter.ps1: line 177
2025-12-06T14:07:41.0199860Z \ at <ScriptBlock>, D:\a\_work\_temp\7be1aedf-7819-473e-832b-cd7373669304.ps1: line 39
2025-12-06T14:07:41.0215370Z \ at <ScriptBlock>, <No file>: line 1
2025-12-06T14:07:41.0223631Z
2025-12-06T14:07:41.0227221Z TenantId: REDACTED.onmicrosoft.com
2025-12-06T14:07:41.0234049Z [2025-12-06 14:07:40] - Error during Export:
2025-12-06T14:07:41.0238588Z
2025-12-06T14:07:41.0257558Z { ||Cannot open mailbox. Server = PR3PR06MB6827.eurprd06.prod.outlook.com, mdbGuid = 30e8b223-be87-4af9-9f9b-ac4a2e70672e, maiboxGuid = 0960bf6c-3e4c-4734-be97-746f34845a0b } \ at Write-ErrorMessage<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 542
2025-12-06T14:07:41.0303030Z \ at CheckRetryAndHandleWaitTime<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1191
2025-12-06T14:07:41.0306110Z \ at Execute-Command<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1545
2025-12-06T14:07:41.0314060Z \ at script:Get-MigrationBatch<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 19010
2025-12-06T14:07:41.0317126Z \ at Export-TargetResource, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\DSCResources\MSFT_EXOMigration\MSFT_EXOMigration.psm1: line 541
2025-12-06T14:07:41.0324873Z \ at <ScriptBlock>, <No file>: line 105
2025-12-06T14:07:41.0327956Z \ at Start-M365DSCConfigurationExtract, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCReverse.psm1: line 815
2025-12-06T14:07:41.0334314Z \ at Export-M365DSCConfiguration, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCUtil.psm1: line 1726
2025-12-06T14:07:41.0339721Z \ at <ScriptBlock>, D:\a\_work\1\s\Source\Scripts\Exporter.ps1: line 177
2025-12-06T14:07:41.0347301Z \ at <ScriptBlock>, D:\a\_work\_temp\7be1aedf-7819-473e-832b-cd7373669304.ps1: line 39
2025-12-06T14:07:41.0350249Z \ at <ScriptBlock>, <No file>: line 1
2025-12-06T14:07:41.0354253Z
2025-12-06T14:07:41.0359588Z TenantId: REDACTED.onmicrosoft.com
2025-12-06T14:07:41.0368394Z [2025-12-06 14:07:40] - Error during Export:
2025-12-06T14:07:41.0368741Z
2025-12-06T14:07:41.0374333Z { ||Some of the parameters specified with the "Get-ExternalInOutlook" cmdlet aren't present in the role definition for the current user. Check the management roles assigned to you, and try again. } \ at Write-ErrorMessage<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 542
2025-12-06T14:07:41.0379752Z \ at CheckRetryAndHandleWaitTime<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1191
2025-12-06T14:07:41.0417436Z \ at Execute-Command<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 1545
2025-12-06T14:07:41.0418170Z \ at script:Get-ExternalInOutlook<Process>, C:\Users\AzDevOps\AppData\Local\Temp\tmpEXO_fwip1w5c.4oz\tmpEXO_fwip1w5c.4oz.psm1: line 13569
2025-12-06T14:07:41.0420808Z \ at Export-TargetResource, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\DSCResources\MSFT_EXOExternalInOutlook\MSFT_EXOExternalInOutlook.psm1: line 328
2025-12-06T14:07:41.0453259Z \ at <ScriptBlock>, <No file>: line 105
2025-12-06T14:07:41.0453775Z \ at Start-M365DSCConfigurationExtract, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCReverse.psm1: line 815
2025-12-06T14:07:41.0454249Z \ at Export-M365DSCConfiguration, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.25.1203.2\Modules\M365DSCUtil.psm1: line 1726
2025-12-06T14:07:41.0454622Z \ at <ScriptBlock>, D:\a\_work\1\s\Source\Scripts\Exporter.ps1: line 177
2025-12-06T14:07:41.0454982Z \ at <ScriptBlock>, D:\a\_work\_temp\7be1aedf-7819-473e-832b-cd7373669304.ps1: line 39
2025-12-06T14:07:41.0455386Z \ at <ScriptBlock>, <No file>: line 1
2025-12-06T14:07:41.0455592ZEnvironment Information + PowerShell Version
Win11/PS5.1