Some SPFx package uploads to Tenant App Catalog failing (Microsoft-side issue)

Update timeline

1. identified Jul 21, 2026, 02:49 PM UTC

   We're aware that some people are experiencing failures when deploying SPFx packages to the SharePoint tenant app catalog using app-only (certificate/application) authentication. Affected requests return the following error, even when the app registration has Sites.FullControl.All granted with admin consent: "Must have Manage Web Site permissions in order to add apps to site collection app catalog" This issue is currently preventing automatic updates to the web part package for Orchestry users. We have reported this to Microsoft and are tracking it closely. This appears to be a Microsoft-side issue, not something within Orchestry's control. It has been reported to Microsoft and is being tracked publicly: PnP PowerShell GitHub issue #5406 [https://github.com/pnp/powershell/issues/5406] SharePoint dev docs GitHub issue #10955 — confirmed as a bug by Microsoft [https://github.com/SharePoint/sp-dev-docs/issues/10955] We are monitoring both threads closely and will post updates here as we learn more. If you're impacted, please reach out to our Customer Success team at support.orchestry.com for a manual workaround.

2. resolved Jul 22, 2026, 02:40 PM UTC

   Microsoft has confirmed that a mitigation has been put in place to resolve the issue affecting SPFx package uploads to the SharePoint tenant app catalog via app-only (certificate/application) authentication. Multiple customers have confirmed the fix in Microsoft's public tracking thread, and our own internal testing confirms the issue no longer reproduces. If you were previously impacted and continue to see this error, please reach out to our Customer Success team at support.orchestry.com. Thanks for your patience while we tracked this down alongside Microsoft.