This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 84%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJV%3C/text%3E%3C/svg%3E)
I am trying to query against azure pipelines runs for a given data factory pipeline resource. The account I am using has build in role Contributor role to the data factory resource.
But I get a permission error when I try to query running pipelines through my application like this:
await client.PipelineRuns.QueryByFactoryAsync(dataFactoryResourceName, factoryRG ...
So question I have is why Contributor role is not sufficient to be able to query against azure data factory resource?
https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#contributor
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 44%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
@JAY VORA Thanks for the ask and also using the Microsoft Q&A.
I assume when you are saying - The account I am using has build in role Contributor role to the data factory resource you meant you have assigned Contributor role to your Application/Service Principal. Also, I do not see the actual error message but I believe you are getting the below error message -
The client '<client_id>' with object id '<object_id>' does not have authorization to perform action 'Microsoft.DataFactory/factories/pipelines/createRun/action' over scope '/subscriptions/<subscription_id>/resourceGroups/<resource-group>/providers/Microsoft.DataFactory/factories/adftutorial/pipelines/pipeline1' or the scope is invalid. If access was recently granted, please refresh your credentials
As per my testing, it works with contributor role access. Please check the next comment with the detailed step I have followed.
@JAY VORA I have assigned Contributor role to the application/service principal by going to my subscription > Access Control(IAM) (as shown below) > Add > Add Role Assignment
Selected Contributor from Role dropdown and added the application shown in the below image -
Here is code and output for your reference.
Please let me know if you are getting a different error or doing anything differently.
Thanks! I think I figured out the problem. Since we had multiple cloud subscription commercial and usgov, it was reading resource from wrong subscription. Thanks for your input though!.
@JAY VORA Great to hear that you are able to resolve the issue.