Hi all,
I am getting the following error when trying to set up Azure AD with my portal. I have set up others before without issue but for some reason this one won't cooperate. Initially it was working but I noticed it was using the SYSTEM user to create and update records. I wanted to move it over to the App Registration (S2S) user but noticed it hadn't been added the Application User to the environment. I manually added the Application User to the environment (i.e., the Azure App) and gave it the necessary security roles. But now it says it can't update the contact entity when a user tries to sign in? I checked the access on dataverse and it says the application user has access through the security roles I gave it.
Here is the error it gives when a user/contact tries to sign in via Azure AD:
[FaultException`1: User with ID 13faa340-dded-ed11-8849-002248****** does not have Update permissions for the adx_identity_username attribute in the contact entity. The contactid of the record is 94a928dc-7ce2-ed11-a7c7-000d3a******] Microsoft.Xrm.Tooling.Connector.CrmServiceClient.Execute(OrganizationRequest request) +141 Adxstudio.Xrm.Services.Pooling.Dataverse.PoolableDataverseConnection.InvokeFuntion(Func`1 function) in C:\__w\1\s\Framework\Adxstudio.Xrm\Services\Pooling\Dataverse\PoolableDataverseConnection.cs:212
My expectation is that the App User gets access through the Authenticated Users web role and this role has the necessary permissions on the contact entity.
My only thought, is that it is not authenticating properly, although I checked AD and the user/contact is authenticating successfully there against the App. My thought is that there is something missing between the App and the Portal which ties back to a issue during creation and why SYSTEM was updating the records.
Any thoughts or help appreciated.