Forum Discussion

dontneedausername's avatar
dontneedausername
Copper Contributor
Jul 02, 2025

Can't connect with GDAP using ExchangeOnlineManagement 3.7.0/3.8.0, but 3.6.0 works

Since upgrading to ExchangeOnlineManagement version 3.7.0, I've been unable to connect to any of my clients using GDAP.  I thought I'd try upgrading to 3.8.0, but I still get the same error:

PS C:\Users\username> connect-exchangeonline -userprincipalname email address removed for privacy reasons -DelegatedOrganization contoso.com

----------------------------------------------------------------------------------------
This V3 EXO PowerShell module contains new REST API backed Exchange Online cmdlets which doesn't require WinRM for Client-Server communication. You can now run these cmdlets after turning off WinRM Basic Auth in your client machine thus making it more secure.

Unlike the EXO* prefixed cmdlets, the cmdlets in this module support full functional parity with the RPS (V1) cmdlets.

V3 cmdlets in the downloaded module are resilient to transient failures, handling retries and throttling errors inherently.

REST backed EOP and SCC cmdlets are also available in the V3 module. Similar to EXO, the cmdlets can be run without WinRM basic auth enabled.

For more information check https://aka.ms/exov3-module

Starting with EXO V3.7, use the LoadCmdletHelp parameter alongside Connect-ExchangeOnline to access the Get-Help cmdlet, as it will not be loaded by default
----------------------------------------------------------------------------------------

The role assigned to user email address removed for privacy reasons isn't supported in this scenario. Please check online documentation for
assigning correct Directory Roles to User.
At C:\Users\username\OneDrive - MSP\Documents\WindowsPowerShell\Modules\ExchangeOnlineManagement\3.7.2\netFramework\
ExchangeOnlineManagement.psm1:758 char:21
+                     throw $_.Exception;
+                     ~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : OperationStopped: (:) [], SystemException
    + FullyQualifiedErrorId : The role assigned to user email address removed for privacy reasons isn't supported in this scenario. Please check online documentation for assigning correct Directory Roles to User.

You'd think there'd be something wrong with my GDAP permissions, but there doesn't appear to be.  I can do anything via the Microsoft 365 Admin Center.  Plus, most notably, if I manually load ExchangeOnlineManagement 3.6.0, everything works perfectly.

I'm running Windows 11, and this behavior is reproducible on Windows PowerShell 5.1 as well as my preferred PowerShell 7.5.2.

How can I troubleshoot this?

2 Replies

  • Americaaman's avatar
    Americaaman
    Iron Contributor

    Downgrade ExchangeOnlineManagement to version 3.6.0, or check GDAP privilege assignments.

    • RPGJon's avatar
      RPGJon
      Copper Contributor

      I hate that this worked.

      Uninstall-Module -name ExchangeOnlineManagement -AllVersions
      Install-Module -name ExchangeOnlineManagement -RequiredVersion 3.6.0

       

Resources