Last updated: 2023-06-27

Source: https://support.freshservice.com/support/solutions/articles/50000004764-understanding-saas-sync-error-messages

Error MessageExplanationIntegrationSolution Article
Calling principal does not have required MSGraph permissions AuditLog.Read.AllNeeds permission to read AuditLog. Refer to the section "Permissions Should Be Assigned" from the solution article.AzureADLink

| No Valid AppRoleAssignments Found | App has Zero Users. |

| Your app is not permitted to access the requested endpoint because it does not have the required scope | Required scopes are missing from the credentials and must be added to the credentials for Saas Discovery. Refer to the solution article for more information. | Gsuite | Link |

| Missing required permission: admin | Required scopes are missing and must be added. Refer the solution article for more information. | Slack | Link |

| Missing required permission: users:read | Required scopes are missing and must be added. Refer the solution article for more information. | | not\_allowed\_token\_type | User Token type should be “Token” for integrating Slack for SaaS Discovery. Refer solution article for steps to generate it. |

| You need to be on the paid version of Slack to perform this action | You need to be on Pro, Business Plus, or Enterprise Grid Plan for integrating Slack for SaaS Discovery. |

| The email address format is invalid | User email is not valid. It has "#EXT#" in the email address | Microsoft 365 | - |

| The email address format is invalid | Has an email with xx.@yy.zz. Remove the trailing dot in the username part of the email address. | Okta | - |