How to retrieve LicenseUri and associated License details via SOA Module

[kimo72]

How to retrieve LicenseUri and associated License details for SOA Module

[sbueffel]

Your message doesn't provide any details about what the issue is.

[kimo72]

Hi sbueffel, I have a question about running the script to generate the reports. I’ve installed the module and all prerequisites, but I’m not sure what to do next. Should I type 'yes' after sending the SOA-PreCheck.json file to the engineer who will perform the assessment? but what sould i do next what personalization need to do on the json?

I see the following cmdlets available for the modules: Get-Module SOA | Select-Object -ExpandProperty ExportedFunctions | ForEach-Object { $_.Keys }, Export-SOARPS, Get-CloudEnvironment, Get-LicenseStatus, Install-SOAPrerequisites, Invoke-SOAVersionCheck, and Test-SOAApplication. this make me wonder if this app requires a license to run.

i am getting also some error while intaling the prerequisites i am attaching a log of the transcript

Install-SOAPrerequisites
Transcript started, output file is C:\Users\admin\AppData\Local\Microsoft\SOA\prereq-06082026152354-log.txt
06/08/2026 15:23:54 Checking if the latest version of the SOA module is installed...

• This script is used to install and validate the prerequisites for running the data collection for one of the Microsoft 365 security assessments offered via Microsoft Services.
• When the script concludes, a file named SOA-PreCheck.json will be created in the current folder. This file should be sent to the engineer who will be delivering the assessment.
• This script MUST be run on the machine that will be used to perform the data collection for the assessment.

#############################################

IMPORTANT

#############################################

This script makes changes on this machine and in your Microsoft 365 tenant. Based on the used parameters, the following will occur:

• Install the latest version of each PowerShell module that is required for the assessment
• Create a Microsoft Entra app registration in your tenant:
  -- The application name will be "Microsoft 365 Security Assessment"
  -- The application will not be visible to end users
  -- The application's client secret is a randomly generated string, will not be stored, and is removed at the conclusion of the script
  (Do NOT remove the application until the after the data collection on the first day of the engagement.)

Is this script being run on the machine that will be used to perform the data collection, and do you agree with the changes above (y/n): y

Proxy requirement was not specified with UseProxy. Connection will be attempted directly.

06/08/2026 15:24:01 Checking manual module installations... 06/08/2026 15:24:01 Checking modules... 06/08/2026 15:24:01 Checking module Microsoft.Online.SharePoint.PowerShell 06/08/2026 15:24:01 Checking module MicrosoftTeams 06/08/2026 15:24:02 Checking module ExchangeOnlineManagement
06/08/2026 15:24:03 Checking module Microsoft.PowerApps.Administration.PowerShell
06/08/2026 15:24:03 Checking module Microsoft.Graph.Authentication
06/08/2026 15:24:04 Checking module ActiveDirectory
Enter the UPN of the account that will be used to connect to Microsoft 365. (If providing a UPN is causing authentication issues, you can press Ctrl-C to abort the script and run it again with the NoAdminUPN and CloudEnvironment parameters.): admin@xxxxxxxxx.com

06/08/2026 15:24:12 Testing connections...
06/08/2026 15:24:13 Connecting to Microsoft Graph (with delegated authentication)...
Connect-MgGraph : The type initializer for 'Azure.Identity.AuthenticationRecord' threw an exception.
At C:\Program Files\WindowsPowerShell\Modules\SOA\3.9.1\SOA-Prerequisites.psm1:1218 char:25

• ... Connect-MgGraph -Scopes 'Application.ReadWrite.All','Orga ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Connect-MgGraph], TypeInitializationException
  • FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph

Connect-MgGraph : The type initializer for 'Azure.Identity.AuthenticationRecord' threw an exception.
At C:\Program Files\WindowsPowerShell\Modules\SOA\3.9.1\SOA-Prerequisites.psm1:1218 char:25

• ... Connect-MgGraph -Scopes 'Application.ReadWrite.All','Orga ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Connect-MgGraph], TypeInitializationException
  • FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph

Connect-MgGraph : The type initializer for 'Azure.Identity.AuthenticationRecord' threw an exception.
At C:\Program Files\WindowsPowerShell\Modules\SOA\3.9.1\SOA-Prerequisites.psm1:1218 char:25

• ... Connect-MgGraph -Scopes 'Application.ReadWrite.All','Orga ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Connect-MgGraph], TypeInitializationException
  • FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph

Connect-MgGraph : The type initializer for 'Azure.Identity.AuthenticationRecord' threw an exception.
At C:\Program Files\WindowsPowerShell\Modules\SOA\3.9.1\SOA-Prerequisites.psm1:1218 char:25

• ... Connect-MgGraph -Scopes 'Application.ReadWrite.All','Orga ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Connect-MgGraph], TypeInitializationException
  • FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph

Connect-MgGraph : The type initializer for 'Azure.Identity.AuthenticationRecord' threw an exception.
At C:\Program Files\WindowsPowerShell\Modules\SOA\3.9.1\SOA-Prerequisites.psm1:1218 char:25

• ... Connect-MgGraph -Scopes 'Application.ReadWrite.All','Orga ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Connect-MgGraph], TypeInitializationException
  • FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph

Test-Connections : Unable to connect to Graph. Skipping dependent connection tests.
At C:\Program Files\WindowsPowerShell\Modules\SOA\3.9.1\SOA-Prerequisites.psm1:2400 char:26

• ... ections = @(Test-Connections -RPSProxySetting $RPSProxySetting -Cloud ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
  • FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Test-Connections

06/08/2026 15:25:08 Connecting to SCC...
06/08/2026 15:25:50 Connecting to Exchange...
Import-Module : Could not load type 'Microsoft.SharePoint.Client.FileVersionBatchDeleteMode' from assembly
'Microsoft.SharePoint.Client, Version=16.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c'.
At C:\Program Files\WindowsPowerShell\Modules\SOA\3.9.1\SOA-Prerequisites.psm1:1035 char:9

•     Import-Module -Name $ModuleName -RequiredVersion $highestVers ...
  

•     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Import-Module], TypeLoadException
  • FullyQualifiedErrorId : System.TypeLoadException,Microsoft.PowerShell.Commands.ImportModuleCommand

Import-PSModule : Error loading module Microsoft.Online.SharePoint.PowerShell.
At C:\Program Files\WindowsPowerShell\Modules\SOA\3.9.1\SOA-Prerequisites.psm1:1366 char:9

•     Import-PSModule -ModuleName Microsoft.Online.SharePoint.Power ...
  

•     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Write-Error], WriteErrorException
  • FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Import-PSModule

WARNING: The names of some imported commands from the module 'Microsoft.PowerApps.AuthModule' include unapproved verbs that might
make them less discoverable. To find the commands with unapproved verbs, run the Import-Module command again with the Verbose
parameter. For a list of approved verbs, type Get-Verb.
06/08/2026 15:26:23 Connecting to Power Apps...
06/08/2026 15:26:28 Connecting to Graph with delegated authentication...
Connect-MgGraph : The type initializer for 'Azure.Identity.AuthenticationRecord' threw an exception.
At C:\Program Files\WindowsPowerShell\Modules\SOA\3.9.1\SOA-Prerequisites.psm1:2469 char:25

• ... Connect-MgGraph -Scopes 'Application.ReadWrite.All','Orga ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Connect-MgGraph], TypeInitializationException
  • FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph

Connect-MgGraph : The type initializer for 'Azure.Identity.AuthenticationRecord' threw an exception.
At C:\Program Files\WindowsPowerShell\Modules\SOA\3.9.1\SOA-Prerequisites.psm1:2469 char:25

• ... Connect-MgGraph -Scopes 'Application.ReadWrite.All','Orga ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Connect-MgGraph], TypeInitializationException
  • FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph

Connect-MgGraph : The type initializer for 'Azure.Identity.AuthenticationRecord' threw an exception.
At C:\Program Files\WindowsPowerShell\Modules\SOA\3.9.1\SOA-Prerequisites.psm1:2469 char:25

• ... Connect-MgGraph -Scopes 'Application.ReadWrite.All','Orga ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Connect-MgGraph], TypeInitializationException
  • FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph

Connect-MgGraph : The type initializer for 'Azure.Identity.AuthenticationRecord' threw an exception.
At C:\Program Files\WindowsPowerShell\Modules\SOA\3.9.1\SOA-Prerequisites.psm1:2469 char:25

• ... Connect-MgGraph -Scopes 'Application.ReadWrite.All','Orga ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Connect-MgGraph], TypeInitializationException
  • FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph

Connect-MgGraph : The type initializer for 'Azure.Identity.AuthenticationRecord' threw an exception.
At C:\Program Files\WindowsPowerShell\Modules\SOA\3.9.1\SOA-Prerequisites.psm1:2469 char:25

• ... Connect-MgGraph -Scopes 'Application.ReadWrite.All','Orga ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Connect-MgGraph], TypeInitializationException
  • FullyQualifiedErrorId : Microsoft.Graph.PowerShell.Authentication.Cmdlets.ConnectMgGraph

Install-SOAPrerequisites : Unable to connect to Graph. Skipping Microsoft Entra application check.
At line:1 char:1

• Install-SOAPrerequisites

•   + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Install-SOAPrerequisites
  
  

06/08/2026 15:26:54 Detailed Output
06/08/2026 15:26:54 Installed Modules

Module InstalledVersion GalleryVersion NewerAvailable

---

Microsoft.Online.SharePoint.PowerShell 16.0.27313.12000 16.0.27313.12000 False
MicrosoftTeams 7.8.0 7.8.0 False
ExchangeOnlineManagement 3.10.0 3.10.0 False
Microsoft.PowerApps.Administration.PowerShell 2.0.217 2.0.217 False
Microsoft.Graph.Authentication 2.33.0 2.33.0 (*) False
ActiveDirectory 1.0.1.0

• Module has been limited to a lower version than what is available in PowerShell Gallery
  06/08/2026 15:26:54 Connections

Name Connected TestCommand

---

SCC True True
Exchange True True
PowerApps True True

06/08/2026 15:26:54 Connections with errors

Name Connected TestCommand

---

GraphSDK False False

06/08/2026 15:26:54 Microsoft Entra enterprise application checks
06/08/2026 15:26:54 Summary of Checks

Check Pass

---

Entra Application False
Module Installation True
Module Connections False

06/08/2026 15:26:54 Output saved to SOA-PreCheck.json which should be sent to the engineer who will be performing the assessment.
06/08/2026 15:26:54 SOA-PreCheck.json is located in: C:\Users\admin3edc

Type 'yes' when you have sent the SOA-PreCheck.json file to the engineer who will be performing the assessment: yes
Transcript stopped, output file is C:\Users\admin\AppData\Local\Microsoft\SOA\prereq-06082026152354-log.txt

could you please add more details on the instruction on how to run the assessment

[sbueffel]

The last sentence (question) in your post is confusing me. As the very first bullet point states (at the beginning after starting the installation), the SOA module is used to install the prerequisites for a Microsoft security assessment (that is performed/delivered by a Microsoft resource), available to customers with a Unified support contract from Microsoft Services. If you were to be getting such an assessment, the Microsoft resource would have sent an email with details about installing the prerequisites.

The exported functions, like Get-LicenseStatus, are used by a separate script that is provided as part of the assessment. They are not meant to be used on their own, such as to "generate a report," using your words.

[kimo72]

We are a Microsoft partner company trying to run it for a client. Is there a way we can get access to run it for our clients?

[sbueffel]

All catalog offerings available from Microsoft Services to customers with a Unified Support contract are delivered exclusively by Microsoft resources. These assessments are not simply running a report with the ORCA module. They are a much more in depth and broader, looking at a customer's security posture in M365.

As for the errors you encountered, it is because of the new EXO module 3.10.0; we will need to update the SOA module or limit the EXO module to 3.9.2.