bad request- Azure key vault

(0) Share

Report

Posted on by danru

Hi,

My flow uses environment variables which links to Azure key vault to get the API secrets.

The Dataverse RetrieveEnvironmentVariableSecretValue action is used by a service account with Azure Key Vault Contributor permissions.

The flow was setup and working well for a number of months.

Suddenly I have a number of flows failing on the dataverse action that retrieves the secret from KV giving the reason that the 'user' (service account) hasn't got permissions to access the secret. Nothing changed and it was working before?

{
 "error": {
 "code": "0x80040216",
 "message": "Error occured while reading secret: User is not authorized to read secrets from '/subscriptions/...' resource."
 }
}

I checked and the service account still has the contributor permission level.

What else can I check? Thank you for your help!

Regards,

Daniel

All responses (2)

Answers (1)

danru 93 on at

Like (0)

Report

Re: bad request- Azure key vault

Hi @LinnZawWin ,

Thank you for responding to my post!

I will speak to my IT department to implement and thank you again for your help!

Regards,

Daniel
Verified answer

Linn Zaw Win 3,000 on at

Like (1)

Report

Re: bad request- Azure key vault

The point no.5 in the Prerequisites of Configure Azure Key Vault mentioned as below. Can you try Key Vault Secrets User role?
Azure Key Vault must have the Key Vault Secrets User role granted to the Dataverse service principal.
Please also go through the other items in the prerequisites and make sure that it aligns with your current set-up.