same azure app for different vendor consuming crm api

(0) Share

Report

Posted on by Anandhcrm

Hi,

I have created azure app registration, got clientid, clientsecret, tenantid.

There is a requirement that one of the third party vendor has to push records to crm entity. For that I need to provide the api details and clientsecret to them.

Same kind of requirement is for another third party vendor also. Is it advisable to let them use the same azure app details.

But different users has to be create with different security roles for them.

I have the same question (0)

All responses (8)

Answers (1)

Suggested answer

Naveen Ganeshe 3,397 User Group Leader on at

Like (1)

Report

Hello Anandhcrm,

I would suggest you to create different apps in azure for vendors. that way you can keep track of every app interaction with D365

Was this reply helpful? Yes No
Pradeep Rai 5,489 Moderator on at

Like (1)

Report

I agreed with naveen.

Was this reply helpful? Yes No
Anandhcrm on at

Like (1)

Report

I can understand. But I am just asking is it possible technically ? Creating two application users having different security roles and assign same clientid to both of them ?

Was this reply helpful? Yes No
Verified answer

Naveen Ganeshe 3,397 User Group Leader on at

Like (1)

Report

I don't think we can create two app users with same client id

Was this reply helpful? Yes No
Anandhcrm on at

Like (0)

Report

I got clientid, clientsecret after done the azure app registration.

I can get the access token by specifying the below details

{

"grant_type" : "Client Credentials",

"ClientID" : "xxxx",

"ClientSecret" :"xxxx",

"Access token url" : "login.microsoftonline.com/.../token",

"scope" : "xxxxxx.crm8.dynamics.com/.default"

}

But, when i consume the crm api using this token, im getting 401: UnAuthorized error.

When I decode the access token, i get below details

I have created the application user in dynamics, assigned security role and map with the clientid. But I didnt find the user/role details in the decrypted access token.

Anything I did wrong or need to do something else ?

Was this reply helpful? Yes No
Suggested answer

Naveen Ganeshe 3,397 User Group Leader on at

Like (1)

Report

Hi Anandh,

Please take a look at this git:

C# : github.com/.../Program.cs

Was this reply helpful? Yes No
Suggested answer

Bipin D365 28,983 Moderator on at

Like (0)

Report

Hi,

Have you added crm_online impersonation permission to your azure app under api permission tab..

learn.microsoft.com/.../walkthrough-register-app-azure-active-directory

Please check step from above article

Was this reply helpful? Yes No
Anandhcrm on at

Like (0)

Report

I have not changed anything, but it is working now.

Was this reply helpful? Yes No