EXORoleGroup: restore of full snapshot failed due to missing "Members"

[leitzler]

Details of the scenario you tried and the problem that is occurring

I exported a snapshot of a development sandbox tenant (https://developer.microsoft.com/en-us/microsoft-365/dev-program) populated with the default sample data.

Then I ran a restore of the full captured snapshot (I did not alter the entities in between). The resource EXORoleGroup failed for a few of the entities:

VERBOSE: [701AE4068A8E]: LCM:  [ Start  Resource ]  [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators]
VERBOSE: [701AE4068A8E]: LCM:  [ Start  Test     ]  [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators]
VERBOSE: [701AE4068A8E]:                            [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators] Testing Role Group configuration for AttackSimAdministrators
VERBOSE: [701AE4068A8E]:                            [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators] Getting Role Group configuration for AttackSimAdministrators
VERBOSE: [701AE4068A8E]:                            [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators] Role Group AttackSimAdministrators does not exist.
VERBOSE: [701AE4068A8E]:                            [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators] Current Values: ApplicationId=***
CertificateThumbprint=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Description=Create and manage all aspects of attack simulation campaigns.
Ensure=Absent
Name=AttackSimAdministrators
Roles=(FFO.extest.microsoft.com/Microsoft Exchange Hosted Organizations/foobar.onmicrosoft.com/Attack Simulator Admin)
TenantId=***
Verbose=True
VERBOSE: [701AE4068A8E]:                            [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators] Target Values: ApplicationId=***
CertificateThumbprint=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Description=Create and manage all aspects of attack simulation campaigns.
Ensure=Present
Name=AttackSimAdministrators
Roles=(FFO.extest.microsoft.com/Microsoft Exchange Hosted Organizations/foobar.onmicrosoft.com/Attack Simulator Admin)
TenantId=***
Verbose=True
VERBOSE: [701AE4068A8E]:                            [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators] Test-TargetResource returned False
VERBOSE: [701AE4068A8E]: LCM:  [ End    Test     ]  [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators]  in 3.7220 seconds.
VERBOSE: [701AE4068A8E]: LCM:  [ Start  Set      ]  [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators]
VERBOSE: [701AE4068A8E]:                            [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators] Setting Role Group configuration for AttackSimAdministrators
VERBOSE: [701AE4068A8E]:                            [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators] Getting Role Group configuration for AttackSimAdministrators
VERBOSE: [701AE4068A8E]:                            [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators] Role Group AttackSimAdministrators does not exist.
VERBOSE: [701AE4068A8E]:                            [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators] Role Group 'AttackSimAdministrators' does not exist but it should. Create and configure it.
Cannot validate argument on parameter 'Members'. The argument is null or empty. Provide an argument that is not null or empty, and then try the command again.
    + CategoryInfo          : InvalidData: (:) [], CimException
    + FullyQualifiedErrorId : ParameterArgumentValidationError,New-RoleGroup
    + PSComputerName        : localhost

VERBOSE: [701AE4068A8E]: LCM:  [ End    Set      ]  [[EXORoleGroup]EXORoleGroup-AttackSimAdministrators]  in 3.7790 seconds.
The PowerShell DSC resource '[EXORoleGroup]EXORoleGroup-AttackSimAdministrators' with SourceInfo 'C:\full\M365TenantConfig_Fixed.ps1::15815::9::EXORoleGroup' threw one or more non-terminating errors while running
the Set-TargetResource functionality. These errors are logged to the ETW channel called Microsoft-Windows-DSC/Operational. Refer to this channel for more details.
    + CategoryInfo          : InvalidOperation: (:) [], CimException
    + FullyQualifiedErrorId : NonTerminatingErrorFromProvider
    + PSComputerName        : localhost

M365TenantConfig at line 15815:

        EXORoleGroup "EXORoleGroup-AttackSimAdministrators"
        {
            ApplicationId         = $ConfigurationData.NonNodeData.ApplicationId;
            CertificateThumbprint = $ConfigurationData.NonNodeData.CertificateThumbprint;
            Description           = "Create and manage all aspects of attack simulation campaigns.";
            Ensure                = "Present";
            Name                  = "AttackSimAdministrators";
            Roles                 = @("FFO.extest.microsoft.com/Microsoft Exchange Hosted Organizations/$OrganizationName/Attack Simulator Admin");
            TenantId              = $ConfigurationData.NonNodeData.TenantId;
        }

Verbose logs showing the problem

See above.

Suggested solution to the issue

N/A

The DSC configuration that is used to reproduce the issue (as detailed as possible)

Using Windows Server Core container, mcr.microsoft.com/windows/servercore:1809-amd64.

Install-PackageProvider -Name NuGet -Force
Install-Module Microsoft365DSC -Force
Update-M365DSCDependencies

The operating system the target node is running

OsName               : Microsoft Windows Server 2019 Standard
OsOperatingSystemSKU : StandardServerEdition
OsArchitecture       : 64-bit
WindowsVersion       : 1809
WindowsBuildLabEx    : 17763.1.amd64fre.rs5_release.180914-1434
OsLanguage           : en-US
OsMuiLanguages       : {en-US}

$PSVersionTable

Name                           Value
----                           -----
PSVersion                      5.1.17763.3770
PSEdition                      Desktop
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}
BuildVersion                   10.0.17763.3770
CLRVersion                     4.0.30319.42000
WSManStackVersion              3.0
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1

Version of the DSC module that was used ('dev' if using current dev branch)

1.23.412.1 Microsoft365DSC                     PSGallery            This DSC module is used to configure and monitor Microsoft tenants, including SharePoint Online, Exchange, Teams, etc.