This was due to the initial connection being done via Device code with is now blocked

Use Permissions Check in Applications Settings and CPV Refresh has been triggered

Could not get token: invalid_grant:AADSTS530036: The refresh token is invalid due to authentication flow checks by Conditional Access. Additionally, since the authentication flows policy applies to all applications, the token will never be usable and should be deleted. Trace ID: 3ed6c44b-8edb-4cb7-b40e-d4c34deed401 Correlation ID: fb64ea88-0c2e-4e40-a48f-41f311c325bf Timestamp: 2026-10-23 01:47:19Z
  NormalizedError
  Access has been blocked by Conditional Access policies. Please check the Conditional Access configuration documentation
  Position
  At /app/API/Modules/CIPPCore/CIPPCore.psm1:49693 char:13 + throw "Could not get token: $($Tenant.LastGraphError)" + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  StackTrace
  at Get-GraphToken, /app/API/Modules/CIPPCore/CIPPCore.psm1: line 49693 at New-GraphGetRequest, /app/API/Modules/CIPPCore/CIPPCore.psm1: line 53443 at Invoke-ListServiceHealthIssues, /app/API/Modules/CIPPHTTP/CIPPHTTP.psm1: line 66130 at <ScriptBlock>, /app/API/Modules/CIPPCore/CIPPCore.psm1: line 22710 at Measure-CippTask, /app/API/Modules/CIPPCore/CIPPCore.psm1: line 94138 at New-CippCoreRequest, /app/API/Modules/CIPPCore/CIPPCore.psm1: line 22710
  ScriptName
  /app/API/Modules/CIPPCore/CIPPCore.psm1
  LineNumber
  49693
  Category