Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
24,288 questions
How to call base API using Grant type client Credentials in business central
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 14.000000000000002%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKS%3C/text%3E%3C/svg%3E)
Khush shah
0
Reputation points
Hi I am try to post base API of sales header using Grant type :- client Credentials
It is generating the token but when I am try to hit the POST method it is giving me the below error
<error xmlns="http://docs.oasis-open.org/odata/ns/metadata">
<code>Unauthorized</code>
<message>The credentials provided are incorrect</message>
</error>
header which I have given
And When I am try with Grant type :- authorization Code I am getting the token as well as my API is also working
Is there any permission issue which I need to resolve or any other issue.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 77%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
Rukmini 1,416 Reputation points Microsoft External Staff2025-04-08T11:10:00.93+00:00 Hi Khush shah,
Can you also include the scope you are passing while generating access token to access business central?
-
Rukmini 1,416 Reputation points Microsoft External Staff
2025-04-09T10:07:07.54+00:00 We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.
-
Khush shah 0 Reputation points
2025-04-09T10:25:30.17+00:00 Hi below is the scope which I am using
Scope:- https://api.businesscentral.dynamics.com/.default -
Rukmini 1,416 Reputation points Microsoft External Staff
2025-04-09T10:50:25.6766667+00:00 Hello @Khush shah,
I understand that you want to access Business Central using client credential flow.
To resolve the Unauthorized error try the below:
- Make sure to create an application user in Power Platform admin center:
Sign in to Power Platform admin center, choose an environment, go to Settings > Users + permissions > Application users, and click + New app user.
Select + Add an app, choose the registered Microsoft Entra application, and click Add (give security administrator as security roles).
- Pass scope as
https://orgxxxxxx.crm.dynamics.com/.defaultwhile generating the access token.
After making the above changes regenerate the access token and try to access the API.
Hope this helps!
Kindly consider upvoting the comment if the information provided is helpful. This can assist other community members in resolving similar issues. Otherwise, please respond with more details and we will try to help.
-
Khush shah 0 Reputation points
2025-04-09T10:59:33.4066667+00:00 Hi we want to integrate PHP CRM system with Business central and on CRM end they are not able to consume our API using Client Credentials.
-
Rukmini 1,416 Reputation points Microsoft External Staff
2025-04-09T11:02:47.7966667+00:00 @Khush shah, yes I get it, can try passing scope as
https://orgxxxxxx.crm.dynamics.com/.defaultinstead ofhttps://api.businesscentral.dynamics.com/.default? And also while using client credential flow you need to Make sure to create an application user in Power Platform admin center as suggested above. -
Rukmini 1,416 Reputation points Microsoft External Staff
2025-04-09T11:09:14.1933333+00:00 @Khush shah, To resolve the issue of integrating your PHP CRM system with Business Central using the Client Credentials Flow, follow these key steps:
- Ensure your app is registered in Azure AD with API permissions to interact with Business Central. Make sure to Grant admin consent.
- Create Application User in Power Platform with security roles.
- Use Client Credentials Flow to obtain an access token by sending a POST request. Include
client_id,client_secret, and scope ashttps://orgxxxxxx.crm.dynamics.com/.default - Use the access token in the Authorization header to make requests to the Business Central API.
This should allow your CRM system to consume the Business Central API using Client Credentials Flow.
Let me know if you need further assistance!
-
Rukmini 1,416 Reputation points Microsoft External Staff
2025-04-10T05:35:19.08+00:00 @Khush shah, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.
-
Rukmini 1,416 Reputation points Microsoft External Staff
2025-04-11T05:40:14.3933333+00:00 @Khush shah, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, please respond with more details and we will try to help.
Sign in to comment
Sign in to answer