Playbook / Auth. and Mail problems

Question

&nbsp;Hello community!I have two challenges in a logic app / playbook. I have created an app registration to use it as a service principle.&nbsp;Problem 1:Part - Run query and visualize resultsSo my understanding is, that we have to grant the Role "Monitoring Reader" or "LogAnalytics Reader" the App Registration. But we got the same error message.. Whats the right way?Raw output:&nbsp;body":&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"ResultStatus":&nbsp;"Forbidden",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"Content":&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"error":&nbsp;{&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"code":&nbsp;"AuthorizationFailed",&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;"message":&nbsp;"The&nbsp;client&nbsp;'APP REG ID'&nbsp;with&nbsp;object&nbsp;id&nbsp;'xxxxxxxxxxx'&nbsp;does&nbsp;not&nbsp;have&nbsp;authorization&nbsp;to&nbsp;perform&nbsp;action&nbsp;'Microsoft.OperationalInsights/workspaces/read'&nbsp;over&nbsp;scope&nbsp;'/subscriptions/XXXXX/resourcegroups/XXXXXX/providers/Microsoft.OperationalInsights/workspaces/A2-Sentinel01'&nbsp;or&nbsp;the&nbsp;scope&nbsp;is&nbsp;invalid.&nbsp;If&nbsp;access&nbsp;was&nbsp;recently&nbsp;granted,&nbsp;please&nbsp;refresh&nbsp;your&nbsp;credentials."&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;}&nbsp;&nbsp;Problem 2:Send Mail with a MFA enabled account&nbsp;The second challenge is to send a mail with active MFA. I read about APP Registration with OAuth. I couldn´t find any tutorials but i think we are not the first customer with that challange 🙂 Any ideas?&nbsp;Thank you!&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

garybushey · Answer

Garfield-P&nbsp;Not sure about question 2, but for question 1 it appears that you need to give you app the rights on the resource directly.&nbsp; It looks like it has no rights to the workspace so it cannot read it.

yash_mudaliar · Answer

Garfield-PIt seems like the first issue is likely due to insufficient app permissions. Many of the permissions sometimes looks very similar in the first look but you need to make sure you have provided the right one if the error is persistent.
The second issue should not be much of a problem as 'OAuth' can absolutely be used as a authentication parameter in playbooks. Can you please elaborate more on what's the issue there?

Forum Discussion

Playbook / Auth. and Mail problems

Share

Resources