This is a followup topic to this GitHub Thread:
https://github.com/SharePoint/sp-dev-docs/issues/6155
The Thread has been closed and mentioned that it should be reopened in this forum.
Just some more details from my side: The problem has occured in three new tenants we have created in the last two weeks. The tenants were only used internally using the developer tenant feature therefore we can't open official tickets for these tenants.
Our documentation always includes this step because we still use the Termstore quite heavily in our software (even though the Termstore performance in general is quite bad). Without adding this account a lot of functionality does not work.
Thefore here is the quote from michael-jensen (a big thank you to him for opening the original thread):
Describe the bug
In the elevated privileges page there is an important tip about adding the app@sharepoint user as a term store administrator if you need app-only write access to the term store (I believe wobba originally wrote about this in a post a couple of years ago).
Unfortunately we were not able to add the app@sharepoint user to the term store administrators group in a couple of tenants that we created in the past couple of days - that account will not resolve in the old and new term store UI (as shown in the following screenshots)
Old page
New page
It appears this issue is not isolated to the term store, as that user would not resolve in other user management areas (i.e. site collection admin, etc.)
What made this even more confusing was I was able to get the app@sharepoint account to resolve in one of our newly created tenants this afternoon, but that only worked via the old term store UI - the other tenant we created yesterday is still not able to resolve that account.
I also tried adding the full username i:0i.t|00000003-0000-0ff1-ce00-000000000000|app@sharepoint and experienced the same result as trying to simply add app@sharepoint.
Steps to reproduce
- Create a new tenant
- Go to the term store in the SharePoint admin center (you can try this in both the old and new UI)
- Add app@sharepoint to the term store administrators and try to resolve that account (and/or save your change)
- See the error saying no match found in the old UI (or no error, but no user resolution in the new UI)
Expected behavior
I expect the app@sharepoint account to resolve, so we can continue to use app only principals to write to the term store.
Environment details (development & target environment)
- Your Developer Environment: N/A
- Target Environment: SharePoint Online
- Framework: N/A
- Browser(s): Chrome v84
- Tooling: N/A
- Additional details: N/A
Additional context
My concern is this app@sharepoint account may be in the process of being removed, which means our app only apps will no longer be able to write to the term store (which would obviously be a significant issue).