Below is my 2 stage script in Azure DevOps release pipeline for authenticating/generating access token, and calling main API, I have a EntraID/Service Principal which is assigned to workspace with Admin access and also used to generate the token. Error is below
Script-Authenticating
# Define Variables
$tokenUrl = "https://login.microsoftonline.com/**/oauth2/v2.0/token"
$scope= "https://api.fabric.microsoft.com/.default"
# Prompt for user credentials
$authParams = @{
"client_id" = $env:clientId
"scope" = $scope
"grant_type" = "client_credentials"
"client_secret" = $env:client_secret
}
# Get Access Token
$response = Invoke-RestMethod -Method Post -Uri $tokenUrl -ContentType "application/x-www-form-urlencoded" -Body $authParams
# Extract and Output the Token
$accessToken = $response.access_token
Write-Output "Full Response: $($response | ConvertTo-Json -Depth 10)"
# Ensure access token is retrieved
if (-not $response.access_token) {
Write-Error "Access token is empty."
exit 1
}
# Store Access Token as a Pipeline Variable (for next task)
Write-Output "##vso[task.setvariable variable=accessToken;isSecret=true]$accessToken"
Write-Output "Stored Access Token Length: $($accessToken.Length)"
Main API call
# Retrieve the Access Token from Azure DevOps Pipeline Variable
$accessToken = "$(accessToken)" # Ensure this is set in the pipeline
Write-Output "Access token Length: $($accessToken.Length)"
# Ensure the token is not empty
if (-not $accessToken) {
Write-Error "Access token is empty. Ensure it is being passed correctly from the authentication task."
exit 1
}
# Set headers for API request
$headers = @{
"Authorization" = "Bearer $accessToken"
"Content-Type" = "application/json"
}
# Define API URL
$workspaceId = "**"
$apiUrl = "https://api.fabric.microsoft.com/v1/workspaces/$workspaceId/git/updateFromGit"
# Retrieve the latest commit hash from GitHub via Azure DevOps Pipeline variable
$commitId = "$(Build.SourceVersion)" # Ensure this is available in the pipeline
# Ensure commitId is not empty
if (-not $commitId) {
Write-Error "Commit ID is empty. Ensure the pipeline is triggered from a Git commit."
exit 1
}
# Define request body
$body = @{
"remoteCommitHash" = "**"
} | ConvertTo-Json -Depth 10
# Call Microsoft Fabric API
try {
$response = Invoke-RestMethod -Uri $apiUrl -Method Post -Headers $headers -Body $body -UseBasicParsing
Write-Output "Fabric API Response: $response"
} catch {
Write-Error "Error calling Fabric API: $_"
exit 1
}
Error:
> Access token Length: 1292 2025-03-06T07:43:51.9969024Z
> D:\a\_temp\7**6.ps1 : Error calling Fabric API:
> 2025-03-06T07:43:51.9969588Z
> {"requestId":"2dc3605d-9891-4f60-b54d-72ba4da52809","errorCode":"Unauthorized","message":"The
> caller is not 2025-03-06T07:43:51.9970305Z authenticated to access
> this resource"} 2025-03-06T07:43:51.9970968Z At line:1 char:1
