Because get_client_from_auth_file does not set correctly resource for GraphRbac
I am also able to reproduce the issue with get_client_from_cli_profile() and GraphRbacManagementClient. Everything works fine if I use the CLI directly or ServicePrincipalCredentials in my python code so I do not believe it is a permissions or config error at least in my case.
@davjr96 Yes, realized get_client_from_cli_profile is impacted as well...
Fixed in azure-common 1.1.13
https://pypi.org/project/azure-common/1.1.13/
You can now simply do that (with no tenant ID)
rbac_client = get_client_from_auth_file(GraphRbacManagementClient,auth_path=AZURE_AUTH_LOCATION)
I took this opportunity to fix the CLI version of this method as well.