Forum Discussion
User token grant flow for Fabric Git APIs in Azure DevOps CI/CD
Hi bsmucker ,
Have you granted the Workspace.ReadWrite.All delegated type permissions required by the Git API for the configured appllication and granted admin consent?
Grant tenant-wide admin consent to an application - Microsoft Entra ID | Microsoft Learn
In addition to this, according to the documentation, it does not support AAD tokens generated as service principal, but only user delegated and requires the admin role of the workspace.
Best Regards,
Liu Yang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Hi Liu,
I've set the following API permissions on my application, but I did not grant admin. consent because the APIs don't seem to require them:
I've also set up my redirect URI to http://localhost.
I'm currently stuck trying to generate an AAD token for my account, but my goal is to create a basic User identity with a password to act like a service principal in the workflow. The RPOC auth flow, which documentation advises against, returned an "InvalidToken" response after I tried to use its Bearer token in a Git API call.
If my Azure DevOps pipeline is making a call to a Python script that needs to make Power BI API calls as a User identity, is the more appropriate automated solution to use an auth code as the User with an offline_access scope for a one-time local setup, obtain the refresh the token, and use that in the subsequent scripted API calls?