Forum Discussion
Sync Error
I keep getting the below sync error. I'm just testing, but the CSV files are very simple so I can't think what could be the problem. Anyone know what this means?
Message: Export of the object with id = 37f05531-2739-42b6-a9e8-182e4c14e4e1 and joining property = Section_9999 to the Microsoft Online Directory Service failed. Reason: Message: One or more errors occurred. Web Response: Message: The remote server returned an error: (400) Bad Request. Web Response: Web Response:
AndrewFrance Hi Andrew, I solved it this morning. It is definitely related to the setting that disables team/group creation by non-admins. See: https://docs.microsoft.com/en-au/microsoft-365/admin/create-groups/manage-creation-of-groups?view=o365-worldwide
In order to get around this, I setup an Azure Security group and set this group as being allowed to create teams/groups following the instructions in the linked article. I then added the following Service Principles/User as members of the group, to allow them to create teams: Microsoft.Azure.SyncFabric, Microsoft Teams Services, Microsoft Teams.
All is now working and Teams are getting created as expected.
Hope this helps.
ā
6 Replies
- MROB83Copper Contributor
AndrewFrance Hi Andrew, I solved it this morning. It is definitely related to the setting that disables team/group creation by non-admins. See: https://docs.microsoft.com/en-au/microsoft-365/admin/create-groups/manage-creation-of-groups?view=o365-worldwide
In order to get around this, I setup an Azure Security group and set this group as being allowed to create teams/groups following the instructions in the linked article. I then added the following Service Principles/User as members of the group, to allow them to create teams: Microsoft.Azure.SyncFabric, Microsoft Teams Services, Microsoft Teams.
All is now working and Teams are getting created as expected.
Hope this helps.
ā
- AndrewFranceCopper Contributor
Hi,
I've tested it our side, and it does appear to resolve the issue. I added my Global Admin account into the security group for Office 365 group creation, and I got no errors.
Interestingly it does say in Microsoft's documentation that Office 365 Global admins can create Groups via any means, such as the Microsoft 365 admin centre, despite the group restrictions, which is probably why SDS could create the group despite the error. https://docs.microsoft.com/en-gb/microsoft-365/admin/create-groups/manage-creation-of-groups?view=o365-worldwide
Many thanks for updating the ticket with this solution.
Andrew
- AndrewFranceCopper Contributor
Wow well done. That's really interesting. In fact although we are getting the error, the Office 365 groups and Teams are being created successfully. I'm also signed-in as a Global Administrator.
However we did just update our policy so that only members of a certain Group could create Office 365 groups, of which I don't think I've added Global Administrators into, as I didn't think they would affected by this. Or at least don't seem to be.
I had a great Teams Meeting with SDS support yesterday, and he informed me that as this issue was not causing any problems then it was probably safe to ignore. The value TenantActionable is also False, which should indicate that there's nothing I can change to resolve the error.
I will look through that article, and most likely add my admin account to the Group which allowed to create Office 365 groups, and test again.
- MROB83Copper ContributorWe are new to SDS and getting the same error.
We have Office 365 Group/Team creation turned off by default except for an admin group who can. Do you have a similar set up? As I am leaning towards that as the cause of the problem at the moment?- AndrewFranceCopper Contributor
That's reassuring. I've tried to keep this super simple - 2 teachers, 1 student, 1 session, only the required fields, and no disallowed characters. Still get the error.
I've got a support call open now, and hope to have some answers later today.
- MROB83Copper ContributorYes we are testing with the same. Some really simple CSV files with the minimum attributes. Ive checked them a hundred times to make sure it is not my mistake but it always fails to sync with that same error.