Applies to Product -Dynamics 365 Customer Insights - Data
What’s happening?
The user is experiencing issues when attempting to authenticate and set up a connection to Google Ads through CI-Data.
Error:
AADSTS650057: Invalid resource. The client has requested access to a resource which is not listed in the requested permissions in the client's application registration. Client app ID: xxxxxxxxxxxxxxxxxxxxx(App Service). Resource value from request: https://api.ci.ai.microsoft.com. Resource app ID: 6ec6a75c-d04e-4613-92da-069f88c74a13. List of valid resources from app registration".
Reason:
The Resource app ID being used is incorrect; it is an old ID that is no longer in use. There may be an old Service Principal in the tenant that is incorrectly mapping the connection.
Resolution:
Microsoft Entra ID thinks https://api.ci.ai.microsoft.com belongs to 6ec6a75c-d04e-4613-92da-069f88c74a13, which is an old app we for Customer Insights. Customer Insights has switched to a new app which has the same resourceUri.
So if there are organizations (Tenants) who were really early adopters of Customer Insights and are now trying the exports, they may face this issue. Deleting the SP 6ec6a75c-d04e-4613-92da-069f88c74a13 is safe, no Customer Insights app is using it.
Mitigations steps:
- Go to Azure Portal
- Search for Enterprise Applications
- Search for 6ec6a75c-d04e-4613-92da-069f88c74a13 there
- Open the matching service principal, going to the Properties section and then pressing the Delete button.