Hey Everyone,
i m trying to create Powershell scripts that will help me manage the customer's admin center, i registred my app in my Microsoft Azure and i have all this permissions granted :
the goal of the app is to get all the customer's tenant id from Partner Center API (working perfectly), those ids will let me access their admin center using the admin center API authentication and manage their envs.
- issue #1 : i have a lot of customers (100+)
issue #2 : to add things manually is time consuming. asking 100+ customers to add my app in their tenant and grant me consent so i can manage their admin center is going to take a lot of time - issue #3 : i have the GDAP , i don't know why i can't access their tenant with api
when i try to authenticate in the customer's admin center with my scripts i always get this error:
AADSTS90099: The application 'XXX' (My Application Name) has not been authorized in the tenant 'YYY'.
Applications must be authorized to access the customer tenant before partner delegated administrators can use them.
how can i resolve this ?
should i add my app manually to the customer's admin center tenant Authorized AAD Apps and ask the admin of the admin center tenant to grant my app consent manually? or is there a way to add automatically my app in every customer's tenant that i have using a script and also grant myself consent ? or none of these and i should do something in the customer's azure tenant.