ARM-created Azure AI Video Indexing using Get Account Access Token With Permission returns 400

Kaylee Elúvian 20

Hi,

I'm losing my mind trying to debug this. I have an Azure AI Video Indexer created from an ARM template (following this instruction https://learn.microsoft.com/en-us/azure/azure-video-indexer/deploy-with-arm-template?tabs=deplybutton).

I cannot execute the AccessTokenWithPermission method in the api-portal.videoindexer.ai environment due to a 400:

{
    "ErrorType": "ARM_ACCOUNT_MUST_BE_MANAGED_BY_ARM",
    "Message": "You can only use the ARM management API for management calls on accounts created on ARM. <a href=\"https://aka.ms/avam-arm-docs\">Learn more</a>. Trace id: 'b869e714-3ee9-411f-8525-f254cdc8a940'."
}

The Learn More link goes to a 404.

This is after trying to use about a billion other ways to try to get a programmatically requested access token for our business application. Requesting one manually through Azure Portal works fine - but is only valid for an hour. I'm encountering nothing but weird roadblocks trying to do this any other way, though.

Does anybody know what I'm doing wrong here?

Thank you x

Kaylee Elúvian 20 Reputation points

2024-03-30T10:48:58.8133333+00:00

@navba-MSFT thank you. I'm still getting a 400 unfortunately when I use "Try It" in the API portal - I don't understand the message, I did create the resource using ARM!
navba-MSFT 17,110 Reputation points Microsoft Employee

2024-04-01T09:37:49.3766667+00:00

@Kaylee Elúvian Could you please try creating a new AI Video indexer resource from Azure portal and check if you are encountering the same issue while invoking the VideoIndexer generate Access Token REST API ? Awaiting your reply.
Kaylee Elúvian 20 Reputation points

2024-04-02T13:34:16.4133333+00:00
@navba-MSFT thank you :) I just create a new AI Video Indexer using the Azure Portal web interface - I think went to the https://api-portal.videoindexer.ai/ portal and invoked AccessTokenWithPermission using the AccountID and location (East US) and got the same error 400:

You can only use the ARM management API for management calls on accounts created on ARM. Trace id: 'de3c9559-68ca-449c-81f6-87029656115b'.
Kaylee Elúvian 20 Reputation points

2024-04-02T13:37:11.1533333+00:00

@navba-MSFT thank you :) I just created a new AI Video Indexer using the Azure web portal. I then invoked the AccessTokenWithPermission endpoint with the new account ID and the location (East US). I got the same message: 400, you can only use the ARM management API for management calls on accounts created on ARM.

Is there anything else I can try? x
navba-MSFT 17,110 Reputation points Microsoft Employee

2024-04-02T14:27:06.1633333+00:00

@Kaylee Elúvian Please confirm if you had invoked this REST API VideoIndexer generate Access Token REST API ?
Kaylee Elúvian 20 Reputation points

2024-04-04T09:22:45.37+00:00

@navba-MSFT no, I was trying to use AccessTokenWithPermission method from the api-portal.videoindexer.ai

BUT because I'm happy to use a logic app, your suggestion works nicely - I can use that to get an access token (using a system-managed identity) and now I've got that token for requests documented in api-portal.videoindexer.ai

Thank you for your help x
navba-MSFT 17,110 Reputation points Microsoft Employee

2024-04-04T09:26:35.2733333+00:00

@Kaylee Elúvian Thanks for your reply. I am glad that the access token is now generated. For the below answer, Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Accepted answer

navba-MSFT 17,110 Reputation points Microsoft Employee

2024-03-29T03:31:50.9233333+00:00

@Kaylee Elúvian Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

I was able to invoke the VideoIndexer generate Access Token REST API and get the access token.

You can try to click on the TryIt option and fill the required field and then generate the Access Token. Here is the sample access token, I received.

Hope this helps. If you have any follow-up questions, please let me know. I would be happy to help.
Please sign in to rate this answer.

1 person found this answer helpful.
navba-MSFT 17,110 Reputation points Microsoft Employee

2024-04-04T09:26:50.2433333+00:00

@Kaylee Elúvian Thanks for your reply. I am glad that the access token is now generated. For the above answer, Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Sign in to comment

ARM-created Azure AI Video Indexing using Get Account Access Token With Permission returns 400

0 additional answers