When I try to call https://graph.microsoft.com/v1.0/reports/partners/billing/usage/unbilled/export using my token, it returns a 403 error message: { "error": { "code": "UnknownError", "message": "", "innerError": { "date": "2024-07-02T05:49:12", "request-id": "1862b93c-6afa-4f8d-92b5-dc8c4a603c43", "client-request-id": "1862b93c-6afa-4f8d-92b5-dc8c4a603c43" } } } https://techcommunity.microsoft.com/t5/forums/postpage/board-id/AzureMigrationPartnerCommunity

Hi @ ramprasad.r This is because your user/service principal lacks a valid PartnerBilling.Read.All permission. Please go to Entra ID to grant this permission for the calling app, and don't forget to grant admin consent for this permission. Hope this helps. If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment .

UnknownError When I try to call https://graph.microsoft.com/v1.0/reports/partners/billing/usage/unbilled/export using my token, it returns a 403 error

Accepted answer

CarlZhao-MSFT 41,771 Reputation points

2024-07-02T08:38:44.6766667+00:00

Hi @ramprasad.r

This is because your user/service principal lacks a valid PartnerBilling.Read.All permission. Please go to Entra ID to grant this permission for the calling app, and don't forget to grant admin consent for this permission.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.
Please sign in to rate this answer.

1 person found this answer helpful.
ramprasad.r 20 Reputation points

2024-07-02T09:19:56.7766667+00:00

Hi @CarlZhao-MSFT,
We already have an application with the PartnerBilling.Read.All permission granted. However, we are still facing the issue. Is there any additional access needed to resolve this issue?

CarlZhao-MSFT 41,771 Reputation points

2024-07-02T09:54:09.56+00:00

Hi @ramprasad.r

Try decoding your access token using jwt.ms and share the screenshot.

ramprasad.r 20 Reputation points

2024-07-02T09:59:03.66+00:00

Hi @CarlZhao-MSFT,I have decoded my token and attached it below. Please review it:

"iss": "https://sts.windows.net/62b81786-7c68-42ea-8a28-f0f614207729/",

"iat": 1719913817,

"nbf": 1719913817,

"exp": 1719942917,

"aio": "E2dgYEhg14/1efNrVnZ/xP7LEuf+AwA=",

"app_displayname": "Partner Center Access CSP App",

"appid": "c39c7ea1-8c1e-4106-b68e-41dca470250e",

"appidacr": "1",

"idp": "https://sts.windows.net/62b81786-7c68-42ea-8a28-f0f614207729/",

"idtyp": "app",

"oid": "5c9c7288-0f9d-4c0b-a962-4838a4c72f3e",

"rh": "0.AUUAhhe4Ymh86kKKKPD2FCB3KQMAAAAAAAAAwAAAAAAAAABFAAA.",

"sub": "5c9c7288-0f9d-4c0b-a962-4838a4c72f3e",

"tenant_region_scope": "NA",

"tid": "62b81786-7c68-42ea-8a28-f0f614207729",

"uti": "1yMDpJCjVEuDy-3HfpIQAA",

"ver": "1.0",

"wids": [

"f023fd81-a637-4b56-95fd-791ac0226033", "0997a1d0-0d1d-4acb-b408-d5ca73121e90"

],

"xms_idrel": "20 7",

"xms_tcdt": 1578345052

}

CarlZhao-MSFT 41,771 Reputation points

2024-07-02T10:16:36.2933333+00:00

Hi @ramprasad.r

I noticed that your token does not include that permission. If you are using an app-only context, then you should grant the calling app the PartnerBilling.Read.All application permission instead of the delegated permission.

ramprasad.r 20 Reputation points

2024-07-02T10:25:58.9733333+00:00

Hi @CarlZhao-MSFT
Sorry for the inconvenience. I have added the decoded access token below. Please review it Ignore the old accessToken:

{

"aud": "https://graph.microsoft.com",

"iss": "https://sts.windows.net/62b81786-7c68-42ea-8a28-f0f614207729/",

"iat": 1719915388,

"nbf": 1719915388,

"exp": 1719944488,

"aio": "E2dgYNjE9fK4jQt7lFvMVZ/8OTnlAA==",

"app_displayname": "Partner Center Web App - CSP Data",

"appid": "8535fe5d-ec65-4d28-b934-813502c5f583",

"appidacr": "1",

"idp": "https://sts.windows.net/62b81786-7c68-42ea-8a28-f0f614207729/",

"idtyp": "app",

"oid": "c5a4e294-d9a9-4b3d-8673-c8a18e83b34b",

"rh": "0.AUUAhhe4Ymh86kKKKPD2FCB3KQMAAAAAAAAAwAAAAAAAAABFAAA.",

"roles": [

"PartnerBilling.Read.All"

],

"sub": "c5a4e294-d9a9-4b3d-8673-c8a18e83b34b",

"tenant_region_scope": "NA",

"tid": "62b81786-7c68-42ea-8a28-f0f614207729",

"uti": "4fl2K1Vxt0m11VGUW2UVAA",

"ver": "1.0",

"wids": [

"0997a1d0-0d1d-4acb-b408-d5ca73121e90"

],

"xms_idrel": "7 2",

"xms_tcdt": 1578345052

}
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

UnknownError When I try to call https://graph.microsoft.com/v1.0/reports/partners/billing/usage/unbilled/export using my token, it returns a 403 error

0 additional answers

Your answer