Application permissions are supported for that endpoint, I'd focus on that "Could not resolve host" error instead. Is this part of the server response, or generated on the client side? Make sure your network is allowing the request.
Trying to access Microsoft Cloud PKI beta API via CURL and failing with "unknown" error
Hi All,
I am trying to query Microsoft Cloud PKI beta APIs via CURL (7.57.0)
and failing. I have setup Cloud PKI properly. I can use the Microsoft Graph Explorer to query the cloud pki but not via CURL from my machine. I can get auth token (via CURL) but when I hit the URL I get unknown error e.g.
curl GET https://graph.microsoft.com/beta/deviceManagement/cloudCertificationAuthority ^
More? -H "Authorization: Bearer eyJ0eXAbvbAKw" ^
More? -H "Accept: application/json"
curl: (6) Could not resolve host: GET
{"error":{"code":"UnknownError","message":"","innerError":{"date":"2025-08-07T11:56:35","request-id":"0b807a49-3ce3-4e2f-9e07-695928635eb1","client-request-id":"0b807a49-3ce3-4e2f-9e07-695928635eb1"}}}
I have registered an App with APPLICATION level permission hence user is not required to login. In permissions I have given:
- DeviceManagementCloudCA.Read.All
- DeviceManagementConfiguration.Read.All
- DeviceManagementManagedDevices.Read.All
With the auth token, I can query devices API without any issue i.e. https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations
Is that the APPLICATION level permission doesn't work with Cloud PK Beta APIs or am I making some mistake?
Microsoft Security | Microsoft Graph
1 answer
Sort by: Most helpful
-
Vasil Michev 121K Reputation points MVP Volunteer Moderator
2025-08-08T17:03:32.5733333+00:00