Consent revoked or expired
Reconnect consent flow and re-run tenant validation checks immediately.
Learn
Azure consent validation troubleshooting guide
Use this fast path to resolve the most common access failures before scan execution.
Missing required roles
Assign Directory Reader, Security Reader, and Reader at proper scope, then run checks again.
Graph or Resource Graph access failed
Verify delegated permissions and ensure the signed-in account has access to target subscriptions.
No enabled subscriptions discovered
Confirm account has Reader access on at least one enabled subscription in scope.