[BUG] In Add-PnPApp overwrite is not working throws error The current user does not have the permission to access the App Catalog.

[SanthoAnbros]

Reporting an Issue or Missing Feature

Not able to overwrite existing app in a SP site collection app catalog even though I have given full control to the registered app for authentication.

Expected behavior

The app should get overwritten

Actual behavior

Throwing the error says The current user does not have the permission to
access the App Catalog.

Steps to reproduce behavior

Try the below
Created an app in a SharePoint site using /_layouts/appregnew.aspx

provided below access using /_layouts/appinv.aspx

Then run the below command

Connect-PnPOnline -Url https://sites.xxxx.com/sites/xxxxxxx -ClientId "xxxxx" -ClientSecret "xxxxx"

Add-PnPApp -path "C:\Projects\xxx\Backups\xxxxx.sppkg" -Scope Site

check the app uploaded to the Site collection level app catalog then try the below command

Add-PnPApp -path "C:\Projects\xxx\Backups\xxxxx.sppkg" -Scope Site -Overwrite

What is the version of the Cmdlet module you are running?

(you can retrieve this by executing Get-Module -Name "PnP.PowerShell" -ListAvailable)

ModuleType Version Name

---

Manifest 1.10.0 PnP.PowerShell

Which operating system/environment are you running PnP PowerShell on?

• [ + ] Windows
• Linux
• MacOS
• Azure Cloud Shell
• Azure Functions
• Other : please specify

[mohamedfamin]

Thanks for notifying us. We are also facing the same issue, which has been occurring across all tenants in the past few days.

We use a registered Azure AD application to overwrite the app in the SharePoint app catalog. However, we are now encountering a permission issue: "The current user does not have permission to access the App Catalog."

This process has been working fine for the last year, but the issue started occurring last week.

[ryan-rosenburg]

We are experiencing the same issue today with our weekly automated deployment. We deploy to our Site Catalog. We found that our SPN now also requires Read access to the Tenant catalog. After that was added the deployment went through.

[SanthoAnbros]

We are experiencing the same issue today with our weekly automated deployment. We deploy to our Site Catalog. We found that our SPN now also requires Read access to the Tenant catalog. After that was added the deployment went through.

How can we provide read access to our app in tenant app catalog?

[Dangerous-Mind]

We are experiencing the same issue today with our weekly automated deployment. We deploy to our Site Catalog. We found that our SPN now also requires Read access to the Tenant catalog. After that was added the deployment went through.

How can we provide read access to our app in tenant app catalog?

Connect-PnPOnline $siteUrl -Interactive
$siteId = (Get-PnPSite -Includes Id).Id
Invoke-PnPGraphMethod https://graph.microsoft.com/v1.0/sites/$siteId/lists
Grant-PnPAzureADAppSitePermission -AppId $appId -DisplayName $appName -Permissions "Read"

[PiotrekKrakowiak]

This should be resolved now

[SanthoAnbros]

This should be resolved now

I don't have access to the tenant app catalog, hence I cannot run the above commands.

[PiotrekKrakowiak]

This should be resolved now

I don't have access to the tenant app catalog, hence I cannot run the above commands.

By resolved I actually meant that it should not anymore require to give explicit access to the tenant app catalog - it should work like it did last week :-)