This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 35%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJB%3C/text%3E%3C/svg%3E)
I've added the API-driven inbound provisioning enterprise app and I'm following this tutorial: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/inbound-provisioning-api-logic-apps
Step 3 calls off to this guide: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/inbound-provisioning-api-configure-app
Of which, step 7 is setting the provisioning mode to automatic. However, I get this generic error when setting it:
Network trace shows a 401 unauthorized in there.
I was using a guest user in the domain but have now created a new admin account and still the same. Is there another pre-requisite to enabling this?
Thanks!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
@Jamie Barron Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.
@Jamie Barron
I wanted to check in and see if you had any other questions or if you were able to resolve this issue?
If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.
@Jamie Barron Thank you for reaching out to us, wanted to check current user privileges while performing this task ?
Make sure you have Application Administrator Privileged role assigned to the user.
Let me know if this helps to achieve your task, feel free to post back.
User is already global administrator, tried adding application administrator and still got the same error. Does it require P1 licences, should the error tell me that? https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
@Jamie Barron Yes you are correct, for API-driven provisioning requires P1 license.
Also Unauthorized error while calling Provisioning API occurs for the below reasons:
Reference: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/inbound-provisioning-api-issues
Hello - I now understand the reason for the error is that the account has no Entra P1/P2 licences...
@Jamie Barron Thank you for sharing the root cause of this issue. Yes, Entra ID Premium P1 license is required to evaluate this feature.
Let me get the documented updated pre-reqs section - https://learn.microsoft.com/en-us/entra/identity/app-provisioning/inbound-provisioning-api-configure-app
Let me know if you have any further questions, feel free to post back.
Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.
@Jamie Barron Got the document updated with P1 license details