Showing results for 
Search instead for 
Did you mean: 
New Member

Power Platform Build Tools (1.0.13) backup Environment task


We are using Azure DevOps Power Platform Build Tools (1.0.13) extension.

We are currently trying to use the following step : "Power Platform Backup Environment" and we would like to know when the feature using the service principal name will be available?

We're using at the moment a service account and the MFA is not supported with this authentication type.

We have read this documentation :

Do you have a narrower timeline for the availability of this feature ?

Many thanks in advance!

Regular Visitor

Struggeling with the same issue for Dynamics 365. Performing this task with a service principal is not possible at the moment.

Advocate I
Advocate I

We are having the same issue. Not possible (yet).

Would be nice to know if this will be supported in the near future.

Frequent Visitor

I also am having trouble. I'm using version 1.0.23 and was under the impression that SPN auth *was* supported for Backups.

I'm getting an error in Azure DevOps about permissions and I assume the reason is that SPN auth is actually not supported.


Can anyone confirm?


Message=The service principal with id 'AzureAD ID Redacted' for application does not have permission to access the path ' in tenant ***.; Internal=System.Net.HttpWebResponse}

Frequent Visitor

I am running in the to same issue. I am using version 0.0.23.

2021-04-29T22:26:15.2045790Z Task         : Power Platform Backup Environment
2021-04-29T22:26:15.2046092Z Description  : Power Platform Backup Environment
2021-04-29T22:26:15.2046333Z Version      : 0.0.23
2021-04-29T22:26:15.2046761Z Author       : Microsoft
2021-04-29T22:26:15.2047066Z Help         : [More Info](
Message=The service principal with id 'GUID' for application  does not have permission to access the path '}
Frequent Visitor

I just broke down and created another generic service connection in AzureDevOps (Username/password). The unfortunate thing is that MFA can't be used with the U/P service connection and you end up having two for a single environment. Not optimal of course.

Frequent Visitor

To close the loop on this one. It seems the latest update now allows you to use service principal auth and use the Power platform Backup Environment task to do backups in your own tenant. I have been able to remove all the Generic username/password Service connections from my DevOps instance. 

Regular Visitor

@JeffCarma Did you actually test this successfully? The option to use a service principal has been around for a while but when actually executing the task so far I've always ran into an error. Would be wonderful if that finally works as expected.

Frequent Visitor

Yes @sit-md , I converted all of my Backup steps last week to Service Principal authentication. Unless there's something going on I can't see, it seems to be working for me. I just ran a backup to show you it worked.

Is it still not working for you?



Here's a snip from the job step output during the execution.





Unfortunately I still get an error message (probably due to a lack of permissions):


The service principal with id '***' for application *** does not have permission to access the path '***/backups?api-v...' in tenant ***.; Internal=System.Net.HttpWebResponse"
Any ideas what permission is missing for the service principal?

Helpful resources

UG GA Amplification 768x460.png

Launching new user group features

Learn how to create your own user groups today!

Community Connections 768x460.jpg

Community & How To Videos

Check out the new Power Platform Community Connections gallery!

M365 768x460.jpg

Microsoft 365 Collaboration Conference | December 7–9, 2021

Join us, in-person, December 7–9 in Las Vegas, for the largest gathering of the Microsoft community in the world.

Users online (1,581)