Get-PnPAzureACSPrincipal not returning all SharePoint Site level AppPrincipals

[MikeGitUser]

Hi,

I'm finding that the "Get-PnPAzureACSPrincipal" cmdlet does not consistently return the app-only registered site level apps that are shown in "[SiteURL]/_layouts/15/AppPrincipals.aspx" for a site. For example, I have a site that shows 2 registered apps in the "AppPrincipals.aspx" list, yet "Get-PnPAzureACSPrincipal" returns an empty result site. This is not always the case. In many cases it "does" return the correct list of apps for a site.

I'm doing the typical "Connect-PnPOnline https://SiteURL -ClientId zzzzz" to set the "context", and then calling "Get-PnPAzureACSPrincipal". My Azure App has the "Application" level "Sites.FullControl.All" and my login running the script has the SharePoint Admin role.

Connect-PnPOnline $site.Url -ClientId "zzzzzzzz-zzzz-zzzz-zzzz-zzzzzzzzzz" -Tenant "ZZZZ.onmicrosoft.com" -Thumbprint "zzzzzzzzzzzzzzzzzzzzzzzzzzzzz"
$apps = Get-PnPAzureACSPrincipal -IncludeSubsites

Does anyone have any experience with "Get-PnPAzureACSPrincipal"? Am I missing a permission?

UPDATE: By the way, I have tried the "-scope Site" parameter and it does not make a difference.

I'm running:
PowerShell 7.3.5
PnP.PowerShell 2.2.0

Thanks!!