PowerAutomate: Creating a role assignment in the scope of an environment

(0) Share

Report

Posted on by SA-02031503-0

Hi!
I'm trying to use a power automate flow to create an application user in each environment in my Microsoft Entra tenant - this points me to the "create role assignment" action under the Power Platform for Admins (V2) connector.
I've gotten to a place where in the create role assignment parameters I need to input a "scope" and cannot get it to work with the environment id (looping over environments and getting the id property).
The documentation for these actions is not very helpful, and I couldn't find example or help from copilot. Did anyone encounter this issue or something similar regarding a scope parameter?
Will help a ton, thank you!

For reference, the error I get when testing the flow is this:

{
    "statusCode": 400,
    "body": {
        "httpStatusCode": "BadRequest",
        "errorCode": "InvalidScopeString",
        "errorMessage": "Invalid scope string: 'Default-2502d603-9459-44ab-9344-e8856717cf17'"
    }
}

Categories:

Building flows

I have the same question (0)

All responses (3)

Answers (0)

Sort by

Suggested answer

Expiscornovus 33,851 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Hi @SA-02031503-0,

Have you tried using a HTTP request for this instead? Or don't you want to use a premium connector?

Examples of this approach can be found over here:

https://sharepointcass.com/2025/07/11/automatically-adding-an-app-user-to-a-power-platform-environment/

https://learn.microsoft.com/en-us/power-platform/admin/create-dataverseapplicationuser

Happy to help out 😁

I share more #PowerAutomate and #SharePointOnline content on my Blog, LinkedIn, Bluesky profile or Youtube Channel

Was this reply helpful? Yes No
SA-02031503-0 2 on at

Like (0)

Report
Copy link

Link copied!

Hi!
First of all thank you for trying to help!

The thing is I want to add specific permissions to that service principal (using a custom role I import as a power-apps solution at an earlier stage). The endpoint you pinpointed always adds the system-admin role which is too high-privileged for my use case.

Was this reply helpful? Yes No
AparnaLedcor 43 on at

Like (0)

Report
Copy link

Link copied!

I am facing same issue and couldn't figure it out either. Please let me know if you were able to figure it out?

Was this reply helpful? Yes No