policy plugin errors on msgraph branch

[theart42]

Hi DirkJan,
I am doing the CARTE lab and am using ROADtools. The lab uses the https://graph.microsoft.com endpoint so I am using the msgraph branch.
roadrecon auth -mg works, roadrecon gather -mg collects the data (using --mfa throws a number of errors, but skip for now). I wanted to try the roadrecon plugin policies, but that throws an error on the database structure of the Policys table:

sqlalchemy.exc.OperationalError: (sqlite3.OperationalError) no such column: Policys.objectType [SQL: SELECT "Policys"."objectType" AS "Policys_objectType", "Policys"."objectId" AS "Policys_objectId", "Policys"."deletionTimestamp" AS "Policys_deletionTimestamp", "Policys"."displayName" AS "Policys_displayName", "Policys"."keyCredentials" AS "Policys_keyCredentials", "Policys"."policyType" AS "Policys_policyType", "Policys"."policyDetail" AS "Policys_policyDetail", "Policys"."policyIdentifier" AS "Policys_policyIdentifier", "Policys"."tenantDefaultPolicy" AS "Policys_tenantDefaultPolicy" FROM "Policys" WHERE "Policys"."policyType" = ? ORDER BY "Policys"."displayName"] [parameters: (18,)] (Background on this error at: https://sqlalche.me/e/20/e3q8)

Using sqlite3 and looking at the table, it has the following columns:

select * from Policys limit 1; conditions|createdDateTime|displayName|grantControls|id|modifiedDateTime|sessionControls|state

I had a similar error when trying to make an xlsexport, a missing objectType on the Users column.

Is the policies plugin not compatible with the msgraph data? Or is there something else happening?

[dirkjanm]

the plugins are not ported yet to the Microsoft Graph so they are not expected to work on that branch.
In addition, the Microsoft Graph does not expose the conditional access policies like the Azure AD graph does, you would need to be an administrator to see them

[theart42]

Thank you for your reply, and I was afraid that would happen.