Cloudyn Data collection not working after Partner Center API secret change

Artur Rybarczyk 26 Reputation points
2021-01-27T11:23:03.027+00:00

Hello,

We have recently changed Partner Center API key and that stopped data collection from subscription added to Cloudyn (https://azure.cloudyn.com).
Since then I've reauthotized the app in AAD, granted appropriate permissions and try to reauthorize subscriptions against Cloudyn AAD App.

After granting consent to read data I get the following error:
Azure account authentication
Couldn't find subscriptions for account

This is concerning since there are subscriptions that are active in Partner Center.

Any help or pointers would be appreciated.

Thanks

Azure Cost Management
Azure Cost Management
A Microsoft offering that enables tracking of cloud usage and expenditures for Azure and other cloud providers.
2,068 questions
{count} votes

Accepted answer
  1. SadiqhAhmed-MSFT 38,321 Reputation points Microsoft Employee
    2021-02-02T12:48:39.45+00:00

    @Artur Rybarczyk I checked logs in Cloudyn and found the following:

    1. I found out that Application Secret Key is still invalid. This causes errors during data collection attempts from Partner Center API.
    2. I found a record about attempt to rediscover subscriptions (reconnect) for tenant 64a4xxx4-9f70-4xx7-a9b7-2f5xxxx6b31. Cloudyn can’t get a list of service principals:
      Request: GET https://graph.windows.net/64a4xxx4-9f70-4xx7-a9b7-2f5xxxx6b31/servicePrincipals?api-version=1.6&$filter=appId%20eq%20'83e638ef-7885-479f-bbe8-9150acccdb3d'
      Response: {"odata.metadata":"https://graph.windows.net/64a4xxx4-9f70-4xx7-a9b7-2f5xxxx6b31/$metadata#directoryObjects","value":[]}
      This might happen if the user who attempts to reconnect tenant doesn’t have permissions to list service principals.

    As subscriptions are active in Partner Center, Cloudyn will try to collect data from Partner Center API. Application Secret Key has to be updated in order to resume collection from Partner Center API.
    Reconnecting tenant would allow Cloudyn collect data from Management API. Though for CSP subscriptions Cloudyn does not process cost data acquired from Management API. In order to reconnect tenant and reactivate subscriptions user who performs reconnection should have permissions to view service principals and grant read access on subscriptions to service principals.

    Here’s a doc on subscriptions activation: Activate Azure subscriptions and accounts | Microsoft Learn

    ----------------------------------------------------------------------------------------------------------------------

    If the response helped, do "Accept Answer" and up-vote it


0 additional answers

Sort by: Most helpful