Online Management API: Security

(0) Share

Report

Posted on by Mathias_BL

Hi,

When you want to the use the PowerShell online management API module you need to be Global Admin or Service Admin in Office 365. I currently do not have these roles but I'm able to manage environments through the admin portal (https://admin.powerplatform.microsoft.com/)

Since I'm able to manage these through the portal I thought I would be able to use the powershell module to automatically manage them but this is not the case since I get a Forbidden every time.

Why does the module require different roles than the admin portal?

Categories:

Application Lifecycle Management (ALM)

All responses (1)

Answers (1)

Verified answer

v-yutliu-msft on at

Like (0)

Report

Re: Online Management API: Security

Hi @Menik1 ,

Could you tell me what is your role?

In PowerShell, you could do many things that you can not do in admin center.

Here's a doc about all the functions about ApiManagement for your reference:

https://docs.microsoft.com/en-us/powershell/module/azurerm.apimanagement/?view=azurermps-6.13.0

Some of them are not supported in admin center.

So the role's requirements may be higher.

While in admin center, not only just global admin and service could manage environments.

There are many kinds of office365 roles, different roles have different permission of admin center.

So the roles' requirements are not the same as in powershell.