Granting Read Privileges to Azure Artifact Feed

Question

How to provide permissions to this USER to access the Packages from Azure Artifact Feed? We have tried checking on the backend to see what that UserID is referring to but unfortunately, I can't find any user with that User ID in our Azure Active Directory? Would like to get some expert advise on this.

{"message":"User '4a2eb786-540d-4690-a12b-4badf25ea6e0' lacks permission to complete this action. You need to have 'ReadPackages'.","typeName":"Microsoft.VisualStudio.Services.Feed.WebApi.FeedNeedsPermissionsException, Microsoft.VisualStudio.Services.Feed.WebApi, Version=14.0.0.0, Culture=neutral, PublicKeyToken=

Answer 1

I had similar issue.
I granted Contributor for 2 users:
<YOUR PROJECT NAME> Build Service (<YOUR-ORG-NAME>)
Project Collection Build Service (<YOUR-ORG-NAME>)

I was also NOT able to findout what is the user name based on error:

[warning]User 'd909a33e-1349-4057-99ea-5d1742b38c3a' lacks permission to complete this action. You need to have 'ReadPackages'.

You can see this on attachement
This solved my issue.

Answer 2

Hi @David Maryo ,

I understand that you are trying to grant "Read" permissions to a particular user to allow that user to access the Azure Artifact Feed. I understand that you are also hoping to figure out how to locate the user by User ID.

In order to grant Read permissions to Azure Artifacts for the user, you need to go to Artifacts > Permissions > Add users/groups > Add the user and select the Access role:

To figure out which user has that particular Object ID, you can use the Get-AzureADObjectByObjectId Powershell command.

Get-AzureADObjectByObjectId  
   -ObjectIds <System.Collections.Generic.List`1[System.String]>  
   [-Types <System.Collections.Generic.List`1[System.String]>]  
   [<CommonParameters>]  

You can also use Microsoft Graph API:

POST https://graph.microsoft.com/v1.0/directoryObjects/getByIds  
Content-type: application/json  
  
{  
    "ids":[""]  
}  

If you want to call the Microsoft Graph with Azure CLI, you can use the command az rest

**az rest --method POST --url 'https://graph.microsoft.com/v1.0/directoryObjects/getByIds' --headers 'Content-Type=application/json'  --body '{"ids":[""]}'**  

Let me know if this helps and if you have further questions.

Thanks,

Marilee