Dynamics Community Forum Thread Details

Dynamics GP 2016 Service Based Architecture: The specified user is not authorized to perform operations in this context.

I'm trying to work with the SBA in Dynamics GP 2016. I've hit an issue when trying to call the standard URLS in this case the /Dynamics/Sales/Customers endpoint. Running the URL

https://<My Server>/GPService/Tenants(DefaultTenant)/Companies(Fabrikam,%20Inc.)/Dynamics/Sales/Customers

NOTE: <My Server> is the fully qualified host name.

The error I get is as follows:

<DexResponse>
<RequestError>
<CorrelationId>635a4f7ff7014bd18e258afa8a4c5032</CorrelationId>
<HttpCode>403</HttpCode>
<ErrorCode>ApplicationLoginFailure</ErrorCode>
<Source>DexterityProcess</Source>
<Message>
The specified user is not authorized to perform operations in this context.
</Message>
</RequestError>
</DexResponse>

I've turned the verbose logging on and this provides me with some more detail from the file 'DexterityRequest_<Corelation ID>_Error.log' from the 'C:\ProgramData\Microsoft Dynamics\GPSvc\Logs\Inst_DEFAULT_16\DexterityRequests\' folder.

12:03:49.377 | [*Error*]::Request Exception (pipeline - expected) :: CorrelationId:[635a4f7ff7014bd18e258afa8a4c5032], HttpCode:[403], ErrorType:[ApplicationLoginFailure], Source:[DexterityProcess], ExInfo:[Microsoft.Dynamics.GP.Svc.Foundation.ErrorHandling.RequestException: The specified user is not authorized to perform operations in this context.
at Microsoft.Dynamics.GP.Svc.DexterityProcess.DexInterop.Steps.LoginStep.ExecuteInternal(ExecutionContext context)
at Microsoft.Dynamics.GP.Svc.DexterityProcess.DexInterop.ExecutionPipeline.Execute(ExecutionContext context)]

I've been through the setup and I'm logging in with a windows account that is setup as the windows account for a user in Dynamics GP and that user has the security of a POWERUSER so it should have permission to everything.

I'm not logged in as the user I'm using to log on to the Service anywhere else.

All the service are running if I use the URL:

https://<My Server>/GPService/Tenants(DefaultTenant)/Companies(Fabrikam,%20Inc.)/Help

I can drill down to get a list of the URLs I can use.

Anyone got any idea or information as to why this isn't working

Thanks in advance.

Hi VenUK

I've replied on your other post which seems to be the same issue.

I've had a similar issue and was able to resolve it. I've been working on and off this issue and I finally hit upon the answer.

I did have 2 problems the first was certificate errors which were causing me to get an error in the 'C:\ProgramData\Microsoft Dynamics\GPSvc\Logs\Inst_DEFAULT_16\DexterityService\' logs having turned on verbose logging in the web management. This was fixed with proper certificates.

However the certificate was not the underlying problem and what was stopping me from calling SBA endpoints. The issue turned out to be accessing SQL Server. The break through came when I came across an 'Information' level event in the 'Event Viewer' under 'Windows Logs' -> 'Application'. The issue was this:

Login failed for user 'Domain\Account'. Reason: Attempting to use an NT account name with SQL Server Authentication. [CLIENT: <local machine>]

This was because during the install I had specified 'Windows Domain Account' for access rather than an 'SQL Account' doing a repair install and specifying an SQL Account instead of a windows domain one solved the issue and I can now hit the standard endpoints from Dynamics GP SBA.

Quick Links