ERR unable to continue processing users, User is not in the allowed roles #173
Description
I'm trying to run AzureHound but it's failing to retrieve the users, the following error is returned:
2026-03-06T14:59:33+01:00 INF collecting azure active directory users...
2026-03-06T14:59:34+01:00 ERR unable to continue processing users error="map[error:map[code:Authentication_RequestFromUnsupportedUserRole innerError:map[client-request-id:<REDACTED> date:2026-03-06T13:59:34 request-id:<REDACTED>] message:User is not in the allowed roles]]"
Authentication is made via device code -> MFA -> refresh token.
Other tools like azure cli, roadrecon (specifying the azure cli client id) and az powershell module work fine.
The problem shouldn't be the Client ID, I tried the one used by AzureHound in RoadRecon and it works fine.
When using the refresh token generated by RoadRecon, the following error is reutned:
2026-03-12T17:12:05+01:00 ERR encountered unrecoverable error error="failed to create new Azure client: map[correlation_id:<REDACTED> error:invalid_grant error_codes:[70000] error_description:AADSTS70000: Provided grant is invalid or malformed. Trace ID: <REDACTED> Correlation ID: <REDACTED> Timestamp: 2026-03-12 16:12:05Z error_uri:https://login.microsoftonline.com/error?code=70000 timestamp:2026-03-12 16:12:05Z trace_id:<REDACTED>]"