Case#07025077 - Device-Code OAuth is not supported

[troll]

Our Conditional Policy “hits” the sign-in because it is of the type “Device Code”.

Is there a possibility of doing any other type of sign-in, with Modern Authentication because we don't want to use Global Admin Role for Restores.

https://learn.microsoft.com/en-us/entra ... ned-device

When you use the device-code OAuth flow, the required grant control for the managed device or a device state condition isn't supported. This is because the device that is performing authentication can't provide its device state to the device that is providing a code. Also, the device state in the token is locked to the device performing authentication. Use the Require multifactor authentication control instead.

Thanks!

[Polina]

Hi Sascha and welcome to Veeam Forums,

There's an option to restore via REST APIs or PowerShell using an app certificate. The required permissions for such restores are listed here.

Thanks

[Smiding]

Hi Polina,

I'm a colleague of Sascha.
Would it be possible to use this configuration/app option when doing a restore in the GUI, or is it only through the REST API?

Thanks!

[Polina]

Hi Alexander,

Unfortunately, not. It's only possible with REST or PowerShell (and also for restores performed via the Restore Portal).

Thanks!