---
title: Get-Mailbox errors in logs for Entra ID and M365 integration
description: "Integration Event log for SCM is showing a failed synchronization with the error: Errors when getting user information: ['Failed to get resource users: Azure request failed: 403 - {"error":{"code":"Fo"
---

[Skip to content](https://support.preludesecurity.com/get-mailbox-errors-in-logs-for-entra-id-and-m365-integration#main-content)

English

Show submenu for translations

[Contact support](https://support.preludesecurity.com/kb-tickets/new?hsLang=en)

![Prelude\_Wordmark\_Black\_Transparent.png\]](https://support.preludesecurity.com/hs-fs/hubfs/Prelude_Wordmark_Black_Transparent.png?height=50&name=Prelude_Wordmark_Black_Transparent.png)

Open main navigation

Close main navigation

- English
  
  Show submenu for translations
- [Contact support](https://support.preludesecurity.com/kb-tickets/new)
- [Visit the website](https://www.preludesecurity.com/)

[Visit the website](https://www.preludesecurity.com/)

 Find what you're looking for

- There are no suggestions because the search field is empty.

1. [Knowledge Base](https://support.preludesecurity.com/?hsLang=en)
2. [Monitor](https://support.preludesecurity.com/monitor?hsLang=en)
3. [Troubleshooting](https://support.preludesecurity.com/monitor?hsLang=en#troubleshooting)

# Get-Mailbox errors in logs for Entra ID and M365 integration

Integration Event log for SCM is showing a failed synchronization with the error:  
`Errors when getting user information: ['Failed to get resource users: Azure request failed: 403 - {"error":{"code":"Forbidden","message":"User is not allowed to call Get-Mailbox","innererror":{"message":"User is not allowed to call Get-Mailbox","type":"Microsoft.Exchange.Admin.OData.Core.ODataServiceException","stacktrace":"","internalexception":{"message":"cmdlet Get-Mailbox is not present in the role definition of the current user","type":"Microsoft.Exchange.Configuration.Authorization.CmdletAccessDenied`

This is caused by an API Permission issue within the Microsoft App Registration.  This can be corrected by adding the following API Permission to your App Registration``

| Use-Case | API | Permission Type | Permission |
| --- | --- | --- | --- |
| M365 (Email) / Entra ID | Microsoft APIs / Microsoft Graph | Application | `MailboxSettings.Read` |

``

The App Registration may also require an additional IAM role.

 Entra ID: Granting Security Reader role

1. Navigate to [Entra ID](https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview) in the **Azure portal**
2. Expand **Manage** and select "**Roles and Administrators**" on the left hand side
3. Search for the "**Global Reader**" role and click on it
4. On the next screen, select **Add Assignment**
5. In the "Search" field, enter the **whole** App ID that you created in the above steps and assign it to the Global Reader role:  
   ![](https://support.preludesecurity.com/hs-fs/hubfs/screenshot_2504-png.png?width=688&height=318&name=screenshot_2504-png.png)

- [Monitor](https://support.preludesecurity.com/monitor?hsLang=en#main-content)

    - [Introduction to Control Monitor](https://support.preludesecurity.com/monitor?hsLang=en#introduction-to-control-monitor)
    - [Configuration](https://support.preludesecurity.com/monitor?hsLang=en#configuration)
    - [Client Hardware Security Integrations](https://support.preludesecurity.com/monitor?hsLang=en#client-hardware-security-integrations)
    - [Device Discovery Integrations](https://support.preludesecurity.com/monitor?hsLang=en#device-discovery-integrations)
    - [EDR Integrations](https://support.preludesecurity.com/monitor?hsLang=en#edr-integrations)
    - [Email Integrations](https://support.preludesecurity.com/monitor?hsLang=en#email-integrations)
    - [Identity Management Integrations](https://support.preludesecurity.com/monitor?hsLang=en#identity-management-integrations)
    - [Endpoint Management Integrations](https://support.preludesecurity.com/monitor?hsLang=en#endpoint-management-integrations)
    - [Vulnerability Management Integrations](https://support.preludesecurity.com/monitor?hsLang=en#vulnerability-management-integrations)
    - [Reporting](https://support.preludesecurity.com/monitor?hsLang=en#reporting)
    - [Troubleshooting](https://support.preludesecurity.com/monitor?hsLang=en#troubleshooting)
- [Detect](https://support.preludesecurity.com/detect?hsLang=en#main-content)

    - [Basics](https://support.preludesecurity.com/detect?hsLang=en#basics)
    - [Integrations](https://support.preludesecurity.com/detect?hsLang=en#integrations)
    - [Probe deployment](https://support.preludesecurity.com/detect?hsLang=en#probe-deployment)
    - [Security tests](https://support.preludesecurity.com/detect?hsLang=en#security-tests)
    - [Alert suppression](https://support.preludesecurity.com/detect?hsLang=en#alert-suppression)
    - [Assurance](https://support.preludesecurity.com/detect?hsLang=en#assurance)
- [Integrations](https://support.preludesecurity.com/integrations?hsLang=en#main-content)

    - [SASE](https://support.preludesecurity.com/integrations?hsLang=en#sase)
- [Account](https://support.preludesecurity.com/account?hsLang=en#main-content)

    - [SSO](https://support.preludesecurity.com/account?hsLang=en#sso)
- [CLI](https://support.preludesecurity.com/cli?hsLang=en)
- [Release Notes](https://support.preludesecurity.com/release-notes?hsLang=en)

[![Origin Technology Logo](https://support.preludesecurity.com/hs-fs/hubfs/origin_logo_inverse_000000.png?width=5000&height=5000&name=origin_logo_inverse_000000.png "Origin Technology Logo")](http://originhq.com)

Prelude Security Knowledge Base

Copyright © 2026, Origin Technology