PAC CLI Service Principal Permission Error When Running pac admin list / pac admin backup #1304
akashombase7
started this conversation in
General
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
My goal is to take a backup of a Power Apps / Dataverse environment using PAC CLI, but I am receiving a permission error related to the Service Principal and tenant access.
I believe all required permissions have been assigned, including System Administrator inside the environment (screenshot included), but the PAC CLI still fails.
[admin@vsgrholpscb02 ~]$ pac admin list
Connected as b9b0bef5-81f4-435a-af48-4c215eefa43e
Listing all environments from your tenant...
** Message: 12:10:01.571: Remote error from secret service: org.freedesktop.DBus.Error.UnknownMethod: No such interface 'org.freedesktop.Secret.Collection' on object at path /org/freedesktop/secrets/collection/login
** Message: 12:10:01.606: Remote error from secret service: org.freedesktop.DBus.Error.UnknownMethod: No such interface 'org.freedesktop.Secret.Collection' on object at path /org/freedesktop/secrets/collection/login
Microsoft PowerPlatform CLI
Version: 2.1.1+gefbf518 (.NET 10.0.2)
Online documentation: https://aka.ms/PowerPlatformCLI
Feedback, Suggestions, Issues: https://github.com/microsoft/powerplatform-build-tools/discussions
Error: The service principal with id 'aeebc187-463a-47c6-bb73-7eb859beb5e8' for application b9b0bef5-81f4-435a-af48-4c215eefa43e does not have permission to access the path 'https://10.0.8.23:20260/providers/Microsoft.BusinessAppPlatform/scopes/admin/environments?`$expand=permissions&api-version=2020-08-01' in tenant 7007305e-2664-4e6b-b9a4-c4d5ccfd1524.
The service principal with id 'aeebc187-463a-47c6-bb73-7eb859beb5e8' for application b9b0bef5-81f4-435a-af48-4c215eefa43e does not have permission to access the path 'https://10.0.8.23:20260/providers/Microsoft.BusinessAppPlatform/scopes/admin/environments?`$expand=permissions&api-version=2020-08-01' in tenant 7007305e-2664-4e6b-b9a4-c4d5ccfd1524.
What I Have Already Verified
✔ Environment-level permissions
The Service Principal already has the System Administrator role assigned within the Dataverse environment (screenshot attached).
✔ Successful login
PAC CLI logs in successfully using the application ID.
❗ Still receiving access/permission errors
Even though environment permissions are correct, the admin APIs in PAC CLI cannot be accessed.
❓ Help Requested
What additional tenant-level or Azure AD permissions are required for a Service Principal to successfully execute:
pac admin list
pac admin backup
Beta Was this translation helpful? Give feedback.
All reactions