Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,560 questions
ISE developer role for Service Principal to access Integration account APIs
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 34%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
kanishka
1
Reputation point
I am using client credential flow to access api
GET https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Logic/integrationAccounts/{integrationAccountName}/schemas?api-version=2016-06-01
I have registered one app, when I give reader/contributor role to this app , I am able to authenticate and access api but with the "Integration Service Environment Developer /Contributor role " , I get the error :
The client 'xxxxfc7bc13e430' with object id 'xxxx7bc13e430' does not have authorization to perform action 'Microsoft.Logic/integrationAccounts/agreements/read'
I am not able to understand the reason as both the roles have same permissions for Microsoft.Logic