Apply-PnPProvisioningTemplate : Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

[yusufshaikh22]

Hi @Zerg00s,
While Importing existing list & libraries in target sit gives an error.

[Attention] Look for a login popup in a separate window. Please, log in to the source site site https://04xd3.sharepoint.com/sites/Federal Connected to the source site Site: https://04xd3.sharepoint.com/sites/Federal
User: Firdos Shaikh ([email protected])
Mapping file resourceMapping.csv is generated
C:\Users\YusufShaikh\Downloads\FlowPowerAppsMigrator
Exporting lists and libraries...
[Attention] Look for a login popup in a separate window. Please, log in to the target site https://t1jtk.sharepoint.com/sites/Federal.

Connected to the target site
Site: https://t1jtk.sharepoint.com/sites/Federal
User: Harsh Markad ([email protected])
Applying PnP Template to https://t1jtk.sharepoint.com/sites/Federal
C:\Users\YusufShaikh\Downloads\FlowPowerAppsMigrator
Importing lists and libraries...
[Error] Make sure that both target site and the source sites created with the same language. Cross-language list migration is not supported.
Apply-PnPProvisioningTemplate : Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
At C:\Users\YusufShaikh\Downloads\FlowPowerAppsMigrator\MISC\Move-Lists.ps1:124 char:9

•     Apply-PnPProvisioningTemplate -Path Lists.xml
  

•     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : WriteError: (:) [Apply-PnPProvisioningTemplate], ServerUnauthorizedAccessException
  • FullyQualifiedErrorId : EXCEPTION,PnP.PowerShell.Commands.Provisioning.Site.ApplyProvisioningTemplate
    Press any key to continue . . .

But i have created one new list in same source site & import to same target site its exported successfully.

[Zerg00s]

Hi @yusufshaikh22 I assume that [email protected] has Full Control at the https://t1jtk.sharepoint.com/sites/Federal site?

In this case, it might be an issue that is difficult to troubleshoot. Would you be able to create 2 SharePoint-only app registration?

• For the source tenant
• For the target tenant

How to Register an App-only permissions app

• Create a new App Principal
  https://tenant.sharepoint.com/_layouts/15/appregnew.aspx

• Get Client ID and Client Secret (on the next screen). Store them in a safe place

• Grant tenant-wide permissions. See full list of permissions.
• https://TENANT-admin.sharepoint.com/_layouts/15/appinv.aspx
• Search for the app ID you created earlier
• Paste XML with Permissions Requests:

<AppPermissionRequests AllowAppOnlyPolicy="true">
  <AppPermissionRequest Scope="http://sharepoint/content/tenant" Right="FullControl" />
  <AppPermissionRequest Scope="http://sharepoint/taxonomy" Right="Write" />
</AppPermissionRequests>

Then you can fill out the config\migrator-config.json file with the required information and run the migratory again.

[Zerg00s]

Update: some site columns cause this issue

I have published a new release, in which I automatically remove several pesky site columns causing the Access Denied error.

For now, I remove only these two fields:

• TriggerFlowInfo
• IsolatedDomain

But I suspect more fields are causing this error. I will attempt to hunt down more of them and include them in future releases. If anyone gets the Access denied error, please, share the Lists.xml file with me so I can debug it and see which fields are responsible for this error.