Unanswered

Power Platform API and service principal authentication

(1) Share

Report

Posted on by TobiasAT

Hello, maybe someone has a hint for my issue.

I configured a service principal flow to access the Power Platform API, as described here.

I created an Entra ID app registration to get the service principal. ✅
I granted the service principal access as Power Platform admin, as described here. ✅

Here is screenshot which proves that the SP has been added through the described way.

3. I even added the service principal as an application user to the environment, to be 100% sure that the Power Platform system knowns the app. ✅

Next, I use an access token for the endpoint api.powerplatform.com to get the environments.

Here is the issue. The system sends an error that my service principal is unknown (which I added in step 2). I tested this with several api-versions, no difference.

The request cannot be completed because the principal in tenant xxxx with object id xxxx does not exist.

Just to note, the object ID 490ed601-d6d9-412c-b38c-60925c64859d is the Enterprise app from my service principal.

I have no clue why the API respond with that error, if the service principal is clearly in my Power Platform tenant.

I just want to add, I did the same steps with the Power Platform command New-PowerAppManagementApp (as described here), which does the same as step 2. Same result.

Any idea what I missed?

Thanks Tobias

Categories:

Governance & administering

I have the same question (0)

All responses (4)

Answers (0)

Michael E. Gernaey 53,452 Super User 2025 Season 2 on at

Like (0)

Report

HI @TobiasAT

Do they have a license and have been added?

Was this reply helpful? Yes No
TobiasAT 15 on at

Like (0)

Report

Hi @Michael E. Gernaey,

You mean whether the service principal has a license? The SP cannot be licensed.
As mentioned in the doc about limitations.

Currently, service principal authentication works for environment management, tenant settings, and Power Apps management. APIs related to Flow are supported for service principal authentication in situations where a license isn't required, as it isn't possible to assign licenses to service principal identities in Microsoft Entra ID.

Was this reply helpful? Yes No
Michael E. Gernaey 53,452 Super User 2025 Season 2 on at

Like (0)

Report

Hi @TobiasAT

So we are talking about 2 different things and calling them the same.

There are still requirements, depending on what you are doing, to have a license. Which means, you may not be able to use what you are calling a service account.

I will take a look more specifically at your API call, but are you certain 100% that that specific API call works without true authentication because not all do.

And what did you do from here

Programmability and Extensibility - Authentication (legacy) - Power Platform | Microsoft Learn

Was this reply helpful? Yes No
Michael E. Gernaey 53,452 Super User 2025 Season 2 on at

Like (0)

Report

Hi @TobiasAT

Were you able to validate what APis you needed or get the clarification you needed?

Was this reply helpful? Yes No