Oliver Kieselbach c9701301ea feat(scripts): Cloud Shell ambient-identity sign-in for Grant-AutopilotMonitorAddOn ...

Try Connect-MgGraph -Identity first (Azure Cloud Shell issues a delegated
token for the signed-in admin, avoiding the device-code flow that
Conditional Access commonly blocks), probe Graph readability, and fall
back to interactive sign-in with explicit scopes otherwise. The
AppRoleAssignment.ReadWrite.All scope guard now applies only to the
interactive path, since ambient-identity tokens carry a fixed scope set.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-21 18:24:31 +02:00

..

Bootstrap

refactor(agent): unified kebab-case log file naming + date-less agent.log

2026-08-18 02:55:06 +02:00

CustomerSetup

feat(scripts): Cloud Shell ambient-identity sign-in for Grant-AutopilotMonitorAddOn

2026-08-21 18:24:31 +02:00