# Troubleshooting

If you encounter any of the following issues or errors, SailPoint recommends that you follow the guidance provided below to resolve the error before contacting SailPoint Support.

For issues or errors that are not addressed in this connector guide, refer to the following resources for troubleshooting information:

- [SailPoint Identity Services Documentation](<https://documentation.sailpoint.com/saas/help/index.html>)
- [SailPoint Support Knowledge Base](<https://support.sailpoint.com/csm?id=kb_view2&amp;kb_id=05ff44289f011200550bf7b6077fcfa3>)
- [SailPoint Developer Community](<https://developer.sailpoint.com/>)

## Exception During Aggregation Even Though Administrator Permissions Are Provided With Full Control Access

The following error message appears in processReadRequest:

`Token type is not allowed`

**Resolution**: Complete the following:

1. Install SharePoint Online PowerShell module (if not already installed).
2. Open PowerShell cmdlets from Windows PowerShell as administrator and run the following commands to authenticate as SharePoint administrator:

   ```text
   $orgName = "<your-org-name>"
   Connect-SPOService -Url https://$orgName-admin.sharepoint.com
   ```
3. Enable Custom App Authentication using the command:

   ```text
   Set-SPOTenant -DisableCustomAppAuthentication $false
   ```

## During Aggregation OneDrive Is Logging Error Messages in the Log File for OneDrive Sites

Error messages are being displayed in the log from OneDrive (for example, `https://<tenant-name>-my.sharepoint.com`) sites.

**Resolution**: Add the `siteCollectionFilter` attribute using the REST API with the following value to exclude all OneDrive and personal sites: `contentclass:STS_Site Path:https://<site_name>.sharepoint.com/*`

For example:

`contentclass:STS_Site Path:https://sailpointdev.sharepoint.com/*`

The default value for the attribute is `contentclass:STS_site`.

> [!NOTE]
>
> For more information on SailPoint's REST APIs, refer to [Best Practices: REST API Authentication](<https://developer.sailpoint.com/docs/api/authentication/>) and [REST API - Update Source (Partial)](<https://developer.sailpoint.com/docs/api/update-source-v-1>) in the SailPoint Developer Community.

## Account or Group Aggregation Fails With an Error for Some of Your Sites

Account or Group aggregation fails for some of your sites, with the following error:

`processReadRequest : Attempted to perform an unauthorized operation`

**Resolution**: Add the `siteCollectionFilter` attribute using the REST API with the following value, which uses a wild card entry when fetching sites: `contentclass:STS_Site Path:https://<site_name>.sharepoint.com/*`

This only fetches sites mentioned in the filter and will not fetch any `contentstorage/personal/other` sites that are having permission issues.

> [!NOTE]
>
> This will only work if other sites are fetched properly and the aggregation failure is caused by a subsection of the sites.

- The following example payload will fetch all the sites that start with QA and are under domain/folder sites:

  ```json
  [ { "op": "add", "path": "/connectorAttributes/siteCollectionFilter", "value": "contentclass:STS_Site Path:https://sailpoint.sharepoint.com/sites/QA*" } ]
  ```
- The following example payload will fetch all sites under the domain/folder sites:

  ```json
  [ { "op": "add", "path": "/connectorAttributes/siteCollectionFilter", "value": "contentclass:STS_Site Path:https://sailpoint.sharepoint.com/sites/*" } ]
  ```