Purview workflow runs privilages

Tomasz Dratwa 0 Reputation points
2024-02-14T09:06:49.84+00:00

I am working on a project where I am implementing a Purview workflow. I have the roles of "Workflow administrator" and "Collection administrator" for the root collection, but I can't see the workflow runs of other users. Is there a way to change this? When I try to retrieve a list of workflow runs using the provided API through the interface: https://learn.microsoft.com/en-us/rest/api/purview/workflowdataplane/workflow-runs/list?view=rest-purview-workflowdataplane-2023-10-01-preview&tabs=HTTP I get an empty list (I am running the API on a dedicated service principal and its token). When I try to retrieve a specific workflow run using the API: https://learn.microsoft.com/en-us/rest/api/purview/workflowdataplane/workflow-run/get?view=rest-purview-workflowdataplane-2023-10-01-preview&tabs=HTTP I get an error: “Request failed: {"error":{"requestId":"XXXXXXXXXXX","code":"Workflow.WorkflowRunErrors.UserIsNotRequestorOfThisWorkflowRun","message":"User YYYYYYYYYYYYY does not have access to the Workflow Run ZZZZZZZZZZZZZ.” I assume the error is due to the fact that the service principal does not have access to other users' workflow runs. Unfortunately, this is unacceptable from the perspective of the project I am implementing. I am building a workflow whose logic I want to base on the status field of an added/changed "glossary term". Workflows do not give access to the built-in variable Term.Status, so I wanted to retrieve it using the REST API. Unfortunately, this was not successful because the service principal does not see the workflow runs of other users. To summarize, can permissions be managed in such a way that a service principal user can retrieve workflow data of other users?

Microsoft Purview
Microsoft Purview
A Microsoft data governance service that helps manage and govern on-premises, multicloud, and software-as-a-service data. Previously known as Azure Purview.
1,465 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.