Symptoms

Azure CSP 3.0 task Provisioning Tenant fails with error:

GrantPermissions' fails: The provided information does not map to an AD object id.

Cause

Teher is an existing Office 365 subscriptions on teh same account. When OA account already has Microsoft Tenant (in scope of existing O365 subscription), Azure CSP does not create new MS Tenant and uses the existing one.

Azure CSP searches on the APS bus for available Office 365 tenant APS resource which has properties default_admin_login and subdomain filled (i.e. Office 365 master tenant). Than Azure application uses these properties to create new Azure CSP tenant APS resource.

If the user specified in the property default_admin_login was removed from MOP for some reason, Azure application throws the error:

The provided information does not map to an AD object id

Such behaviour was recognized as a software issue APSA-16588 and was fixed in Azure CSP 3.1.1.

Resolution

Please upgrade Azure CSP to the version 3.1.1 or higher. On order to process the failed task, please follow the below steps:

  1. Find the User Principal Name (UPN) of the default admin user at CCP > Office 365
  2. Create this user in MOP with the Global Administrator role
  3. Go to CCP > Office 365 and click synchronize now link - the user will be created at OA CCP
  4. Restart the failed task.

Internal content