Hi everyone,
I have set up an Azure Key Vault which works well in the scope of a Flow which I authored and ran. (The Azure Subscription, Resource Group, Key Vault and Secret are working correctly in the Flow when they are called by the Flow).
I am trying to take this a step further, to add an Environment Variable in my Dataverse-based Solution which will call Key Vault to obtain the Secret. When I try to save the Environment Variable, I see this error:
The 'Owner' of the resources is logged in at the time the above is attempted, so it seems that the "User" it's referring to is the Dataverse 'service', and not the scope of a user account.
I've found register the Microsoft.PowerPlatform resource provider in my Azure subscription (). I can confirm this has already been done.
It also states:
"Azure Key Vault must have the Key Vault Secrets User role granted to the Dataverse service principal. If it doesn't exist for this vault, add a new access policy using the same method you previously used for the end user permission, only using the Dataverse application identity instead of the user.
If you have multiple Dataverse service principals in your tenant, then we recommend that you select them all and save the role assignment. Once the role is assigned, review each Dataverse item listed in the role assignments list and select the Dataverse name to view the details. If the Application ID isn't 00000007-0000-0000-c000-000000000000**, then select the identity, and then select Remove to remove it from the list."
The problem is, I do not know how to check if we have a Dataverse Service Principal, or, how to set one up. Completing some searches for this have not revealed any information. Can anyone advise on next steps for this?
Thank you!