Azure Confidential Ledger gives "Not allowed to call POST /app/transactions Status: 403 (Forbidden)"

Question

Azure Confidential Ledger gives "Not allowed to call POST /app/transactions Status: 403 (Forbidden)"

Dweep Shah 10

I have create ConfidentialLedgerService & trying to access from c# app.

It throws "Not allowed to call POST /app/transactions Status: 403 (Forbidden)".

I have already provided permission to my Azure Ad App (xyz) permission for Confidential Ledger.

Can anyone help one the same?

Dweep Shah 10 Reputation points

2023-05-03T11:19:01.26+00:00

c# Code for reference

Dweep Shah 10 Reputation points

2023-05-03T11:19:01.26+00:00

c# Code for reference

Answer 1

CarlZhao-MSFT 23,031

Hi @Dweep Shah

Here's the same question, see if it helps you.

Dweep Shah 10 Reputation points

2023-05-09T13:39:26.4166667+00:00

Hi Carl,

Thanks for you answer. I tried the steps as given in the similar question.
I tried creating Azure Confidential Ledger using ARM Template. Also I have given all the required permissions to the AD App but I am getting 401 UnAuthorized as the error.

I am unable to figure solution. Do you have idea about this?
Dweep Shah 10 Reputation points

2023-05-09T13:44:23.7266667+00:00

Hi Carl,

Thanks for your answer. I tried the solution as given in the similar question and created the resource using ARM Templates. Now I am getting 401 - Unauthorized error even though I have provided all the required access to the Azure Ad App.

I am unable to figure out why it is not working. Do you have idea about it?

Ramki Krishnan 0

Hi Carl,

I followed the ARM template solution and created a ledger. I am still facing the same problem described below.

--

azure.core.exceptions.ClientAuthenticationError: (NotAllowed) Not allowed to call POST /app/transactions

Code: NotAllowed

Message: Not allowed to call POST /app/transactions

--

Screenshot of arm template is - Screenshot 2023-05-17 153713.png. Deployment json is below. My client object id is a0670ba7-c45f-4d08-8d57-e987dbc77183 and my user object id is 84eca3a3-981c-4626-a0be-f6cca293e22c. Really appreciate your help, perhaps a call? We have a VMware subscription.

{
    "id": "/subscriptions/d5642287-db0e-48da-9592-1b18ace8f084/resourceGroups/ramki/providers/Microsoft.ConfidentialLedger/Ledgers/ramki-acl",
    "name": "ramki-acl",
    "type": "Microsoft.ConfidentialLedger/Ledgers",
    "location": "eastus",
    "properties": {
        "ledgerName": "ramki-acl",
        "ledgerUri": "https://ramki-acl.confidential-ledger.azure.com",
        "identityServiceUri": "https://identity.confidential-ledger.core.azure.com/ledgerIdentity/ramki-acl",
        "ledgerType": "Public",
        "aadBasedSecurityPrincipals": [
            {
                "principalId": "a0670ba7-c45f-4d08-8d57-e987dbc77183",
                "tenantId": "00000000-0000-0000-0000-000000000000",
                "ledgerRoleName": "Administrator"
            },
            {
                "principalId": "84eca3a3-981c-4626-a0be-f6cca293e22c",
                "tenantId": "b39138ca-3cee-4b4a-a4d6-cd83d9dd62f0",
                "ledgerRoleName": "Administrator"
            }
        ],
        "ledgerInternalNamespace": "c2664db2-4b7f-4d3f-b46a-1d0f7f67995e"
    }
}

Azure Confidential Ledger gives "Not allowed to call POST /app/transactions Status: 403 (Forbidden)"

1 answer

Activity