Get token with d365fo.tools

(3) Share

Report

Posted on by Hu, Ethan

156

Dear experts,

I want to use PowerShell to execute some scripts, so I installed d365fo.tools.

When I use the command Get-D365LcsApiToken to get the access token, an error always appears:The remote server returned an error: (401) Unauthorized.

I have checked the parameters several times without finding any problems, I don't know where the problem lies.

I have disabled the user's MFA authentication.

The commands to be executed are as follows:

Get-D365LcsApiToken -ClientId "b1ff7cb5-****-********" -Username "*****@*****.onmicrosoft.com" -Password "********" -LcsApiUri "https://lcsapi.lcs.dynamics.com" -Verbose | Set-D365LcsApiConfig -ProjectId "******" -ClientId "b1ff7cb5-****-********"

Categories:

Dynamics 365 Finance

I have the same question (0)

All responses (8)

Answers (1)

Sohaib Cheema 49,636 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

I wonder if you added the permissions on the Azure Registered app (Dynamics LCS>Service user_impersonation , Microsoft Graph>User.Read)

Also did you notice you are passing client id twice which is not needed.

Was this reply helpful? Yes No
Hu, Ethan 156 on at

Like (0)

Report
Copy link

Link copied!

Dear @Sohaib Cheema,

I have added the Microsoft Graph>User.Read.

I can't find Dynamics LCS from the API list.

I have tried deleting the second client id parameter, but it did not work.

Was this reply helpful? Yes No
Sohaib Cheema 49,636 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Hi @Hu, Ethan

click on the middle tab (Manage - API Permissions tab) and then search for Dynamics Lifecycle services

Docs Reference

Was this reply helpful? Yes No
Hu, Ethan 156 on at

Like (0)

Report
Copy link

Link copied!

Hi @Sohaib Cheema,

I have added the permission.

The error is same.

Was this reply helpful? Yes No
Verified answer

Sohaib Cheema 49,636 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!
Hi @Hu, Ethan

Now your error message provides a different message, which you can read and compare with the previous one, although the reason remains the 401

1) Did you grant the admin consent, as said in the document?

2) Did you enable the public client as well, as documented?

Please complete the two steps and once those are done, try with other tool like Postman, as in Microsoft example on the docs. Once you eliminate the permissions issue (401) you can use any third party tools like d365fo.tools

Content-Type: application/x-www-form-urlencoded Host: login.microsoftonline.com Accept: application/json POST https://login.microsoftonline.com/YOUR_TENANT.COM/oauth2/v2.0/token BODY: client_id={CLIENT_ID_FROM_AZURE_CLIENT_APP}&scope=https://lcsapi.lcs.dynamics.com//.default&username={USER_EMAIL_ADDRESS}&password={PASSWORD}&grant_type=password

Was this reply helpful? Yes No
Suggested answer

Sagar121 1,128 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Does your account have LCS access and premission ?

1 people found this reply helpful.

Was this reply helpful? Yes No
Suggested answer

Yng Lih 1,612 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Hi,

You might want to narrow down the troubleshooting, by using the environment administrator id (id can be found from LCS) to try above.

If this information was helpful, kindly mark it as 'Verified'. Thank you. :)

Was this reply helpful? Yes No
Hu, Ethan 156 on at

Like (1)

Report
Copy link

Link copied!

Hi @Sohaib Cheema,

You are right, I can get token after enable public client.

I have another question, when calling Get D365LcsDatabaseOperationStatus to get the database status, it always appears The remote server returned an error: (500) Internal Server Error.

Thank you all for providing assistance.

Also, in my environment in China, with the same settings, there are still errors.

The command I used is as follows

Get-D365LcsApiToken -ClientId "2f898d80-*******-******" -Username "******@*****.partner.onmschina.cn" -Password "********" -LcsApiUri "https://lcsapi.lcs.dynamics.cn" | Set-D365LcsApiConfig

Was this reply helpful? Yes No