Authentication Issue in Data Factory Pipeline

%3CLINGO-SUB%20id%3D%22lingo-sub-2434707%22%20slang%3D%22en-US%22%3EAuthentication%20Issue%20in%20Data%20Factory%20Pipeline%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2434707%22%20slang%3D%22en-US%22%3E%3CDIV%3E%3CP%3EHello%2C%3CBR%20%2F%3EUpon%20trying%20mentioned%20steps%20-%20I%20am%20getting%20the%20below%20error%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20client%20'xxxx'%20with%20object%20id%20'xxxx'%20does%20not%20have%20authorization%20to%20perform%20action%20%3CEM%3E%3CSTRONG%3EMicrosoft.DataFactory%2Ffactories%2Fpipelines%2Faction%3C%2FSTRONG%3E%3C%2FEM%3E%26nbsp%3Bover%20scope%20%3CEM%3E%3CSTRONG%3E%2Fsubscriptions%2Fxxxx%2FresourceGroups%2Fxxxx%2Fproviders%2FMicrosoft.DataFactory%2Ffactories%2Fxxxx%2Fpipelines%2Fxxxx%3C%2FSTRONG%3E%3C%2FEM%3E%20or%20the%20scope%20is%20invalid.%20If%20access%20was%20recently%20granted%2C%20please%20refresh%20your%20credentials.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20are%20few%20details%20of%20what%20I%20did%3A%3CBR%20%2F%3E1.%20Done%20registration%20of%20Application%20and%20creation%20of%20Certificate%20(%20to%20get%20Client%20ID%20%26amp%3B%20Client%20Secret)%3CBR%20%2F%3E2.%20Got%20Bearer%20(Access)%20token%20by%20hitting%20%3CA%20title%3D%22https%3A%2F%2Flogin.microsoftonline.com%2F%257b%257btenant_id%257d%257d%2Foauth2%2Ftoken%22%20href%3D%22https%3A%2F%2Flogin.microsoftonline.com%2F%257B%257Btenant_id%257D%257D%2Foauth2%2Ftoken%22%20target%3D%22_blank%22%20rel%3D%22noreferrer%20noopener%20nofollow%22%3Ehttps%3A%2F%2Flogin.microsoftonline.com%2F%7B%7Btenant_id%7D%7D%2Foauth2%2Ftoken%3C%2FA%3E%20with%20all%20the%20details%20as%20mentioned%20in%20post.%3CBR%20%2F%3E3.%20Hitting%20the%20endpoint%20for%20Executing%20the%20Pipeline%20(%20with%20all%20valid%20details%20as%20URL%20parameters)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20note%20%3A%20I'm%20having%20currently%20Contributor%20Role%20in%20the%20Subscription.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20tried%20executing%20the%20%3CSTRONG%3EcreateRun%3C%2FSTRONG%3E%20URL%20in%20Microsoft%20platform%20on%20signing-in%20(%3CA%20title%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Frest%2Fapi%2Fdatafactory%2Fpipelines%2Fcreate-run)%22%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Frest%2Fapi%2Fdatafactory%2Fpipelines%2Fcreate-run)%22%20target%3D%22_blank%22%20rel%3D%22noreferrer%20noopener%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Frest%2Fapi%2Fdatafactory%2Fpipelines%2Fcreate-run)%3C%2FA%3E%20with%20my%20subscription%20account%20and%20it%20seems%20to%20running%20fine%20over%20there%2C%20but%20only%20when%20I'm%20accessing%20through%20external%20call%20-%20I%20doubt%20that%20I%20am%20not%20able%20to%20generate%20full%20authorized%20token%20to%20perform%20%3CSTRONG%3EcreateRun%3C%2FSTRONG%3E.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20you%20please%20assist%20me%20on%20what%20could%20be%20the%20issue%20for%20the%20above%20mentioned%20error.%3C%2FP%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2434707%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Data%20Factory%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Visitor

Hello,
Upon trying mentioned steps - I am getting the below error:

 

The client 'xxxx' with object id 'xxxx' does not have authorization to perform action Microsoft.DataFactory/factories/pipelines/action over scope /subscriptions/xxxx/resourceGroups/xxxx/providers/Microsoft.DataFactory/factories/xxxx/pipelines/xxxx or the scope is invalid. If access was recently granted, please refresh your credentials.

 

Here are few details of what I did:
1. Done registration of Application and creation of Certificate ( to get Client ID & Client Secret)
2. Got Bearer (Access) token by hitting https://login.microsoftonline.com/{{tenant_id}}/oauth2/token with all the details as mentioned in post.
3. Hitting the endpoint for Executing the Pipeline ( with all valid details as URL parameters)

 

Please note : I'm having currently Contributor Role in the Subscription.

 

I tried executing the createRun URL in Microsoft platform on signing-in (https://docs.microsoft.com/en-us/rest/api/datafactory/pipelines/create-run) with my subscription account and it seems to running fine over there, but only when I'm accessing through external call - I doubt that I am not able to generate full authorized token to perform createRun.

 

Can you please assist me on what could be the issue for the above mentioned error.

0 Replies