cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
mveloso
Microsoft
Microsoft

Azure DevOps connector to external organization

Hi

I am trying to setup a flow to connect to my customer's ADO and i cannot see the customer's organization name in my drop down list. I checked the documentation here: https://marketplace.visualstudio.com/items?itemName=MS-Flow.microsoftflow and the only thing that they mention is to make sure that the account supports oAuth. 

  1. How do i check that the account supports oAuth? the only setting i see that may match this description is on the org level and it is already turned on " third party applications via oAuth"
  2. What am i missing? i am trying to connect using my corp account which is Project admin, but this is not an account on the customer's domain
     
     
     
1 ACCEPTED SOLUTION

Accepted Solutions
rimatos
Community Support
Community Support

Hi @mveloso,

 

I'm not entirely sure how the process of authenticating and giving access to external users in Azure Dev Ops works, but i would assume to have something to do with the environment settings, and adding users to the required Project , with appropriate Access level, and to the desired Project and Group.image.png

 

My suggestion would be to double check this are and see how your user is configured, as this could indicate the reason why you are receiving the unauthorized error message.

 

As for other places to look into that I can think of would be checking in the Azure Active Directory if the customer as any restrictions in Azure Dev Ops, or to external/guest users.

 

I hope this helps!
If you still find yourself having issues into connecting to this service my recommendation would be to open a ticket to Microsoft Support through https://admin.powerplatform.microsoft.com/support, in order to be able to Troubleshoot this in more depth.

 

Regards,

Ricardo

View solution in original post

5 REPLIES 5
rimatos
Community Support
Community Support

Hi @mveloso,

 

In this situation I believe the issue is the fact that the account that you are using is not on the customers domain. 

 

When you create a connection, the conector will retrieve the information from the tenant of the account you used as a connection. As such, it should only display the organizations that you own, and not the organizations owned by your customer. If you have permissions to access the organization you could try to enter the organization manually as a custom value.

 

For mor information on this connector you can consult our documentation here.

 

 

Hope this helps!

 

Regards,

Ricardo

@rimatos , thank you for your reply,

I am not sure the problem is the fact that i am using an account that is not on the Domain, unless that is a new restriction, because if have already done this on a previous customer, though i do not know how they had DevOps configured to allow that, which is what i am trying to find out.

 

I have tried entering the org details manually, but when i try to save the flow i get the following error :

 

Flow save failed with code 'DynamicOperationRequestClientFailure' and message 'The dynamic operation request to API 'visualstudioteamservices' operation 'GetResponseWorkItemSchema' failed with status code 'Unauthorized'. This may indicate invalid input parameters. Error response: { "status": 401, "message": "TF400813: The user '<SOME GUID>\\xxx@bbb.com' is not authorized to access this resource.\r\nAzure DevOps ActivityId: <SOME GUID>\r\nDetails: {\"$id\":\"1\",\"innerException\":null,\"message\":\"TF400813: The user '<SOME GUID>\\xxx@bbb.com' is not authorized to access this resource.\",\"typeName\":\"Microsoft.TeamFoundation.Framework.Server.UnauthorizedRequestException, Microsoft.TeamFoundation.Framework.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=XXXXXX\",\"typeKey\":\"UnauthorizedRequestException\",\"errorCode\":0,\"eventId\":3000}\r\nclientRequestId: xxxxxxxxxx", "error": { "message": "TF400813: The user '<SOME GUID>\\xxx@bbb.com' is not authorized to access this resource.\r\nAzure DevOps ActivityId: XXXXXXXX\r\nDetails: {\"$id\":\"1\",\"innerException\":null,\"message\":\"TF400813: The user '<SOME GUID>\\xxx@bbb.com' is not authorized to access this resource.\",\"typeName\":\"Microsoft.TeamFoundation.Framework.Server.UnauthorizedRequestException, Microsoft.TeamFoundation.Framework.Server, Version=14.0.0.0, Culture=neutral, PublicKeyToken=XXXXXXX\",\"typeKey\":\"UnauthorizedRequestException\",\"errorCode\":0,\"eventId\":3000}" }, "source": "vsts-wcus.azconn-wcus-01.p.azurewebsites.net" }'.
 
So, clearly, i am missing some permission, though the link you have provided does not explain how to set the needed permissions
"To use this integration, you will need access to a Visual Studio Team Services account with API access enabled. To make a connection, select Sign In. You will be prompted to provide your Visual Studio Team Services account, follow the remainder of the screens to create a connection."
when i sign in with my account nothing changes.
 
Please also note that, with this same account, i am Project administrator on the project i am trying to connect the Flow to.
So maybe i am missing some other permission that i am not aware of? any additional information would be highly appreciated 🙂
Thanks
rimatos
Community Support
Community Support

Hi @mveloso,

 

I'm not entirely sure how the process of authenticating and giving access to external users in Azure Dev Ops works, but i would assume to have something to do with the environment settings, and adding users to the required Project , with appropriate Access level, and to the desired Project and Group.image.png

 

My suggestion would be to double check this are and see how your user is configured, as this could indicate the reason why you are receiving the unauthorized error message.

 

As for other places to look into that I can think of would be checking in the Azure Active Directory if the customer as any restrictions in Azure Dev Ops, or to external/guest users.

 

I hope this helps!
If you still find yourself having issues into connecting to this service my recommendation would be to open a ticket to Microsoft Support through https://admin.powerplatform.microsoft.com/support, in order to be able to Troubleshoot this in more depth.

 

Regards,

Ricardo

View solution in original post

Thanks, you have been very helpful

Hi @mveloso ,

I am facing the same issue. Organization is not showing in the dropdown. User has access level BASIC in the organization. How do you solved the problem? 
Thank you in advance!

Helpful resources

Announcements
MPA_User Group Leader_768x460.jpg

Manage your user group events

Check out the News & Announcements to learn more.

Community Connections 768x460.jpg

Community & How To Videos

Check out the new Power Platform Community Connections gallery!

Welcome Super Users.jpg

Super User Season 2

Congratulations, the new Super User Season 2 for 2021 has started!

Carousel 2021 Release Wave 2 Plan 768x460.jpg

2021 Release Wave 2 Plan

Power Platform release plan for the 2021 release wave 2 describes all new features releasing from October 2021 through March 2022.

Users online (2,343)