cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
laurentissot
New Member

Power Platform Build Tools (1.0.13) backup Environment task

Hello,

We are using Azure DevOps Power Platform Build Tools (1.0.13) extension.

We are currently trying to use the following step : "Power Platform Backup Environment" and we would like to know when the feature using the service principal name will be available?

We're using at the moment a service account and the MFA is not supported with this authentication type.

We have read this documentation : https://docs.microsoft.com/en-us/power-platform/alm/devops-build-tool-tasks#power-platform-backup-en....

Do you have a narrower timeline for the availability of this feature ?

Many thanks in advance!

23 REPLIES 23
sit-md
Regular Visitor

Struggeling with the same issue for Dynamics 365. Performing this task with a service principal is not possible at the moment.

KimB
Advocate I
Advocate I

We are having the same issue. Not possible (yet).

Would be nice to know if this will be supported in the near future.

JeffCarma
Helper I
Helper I

I also am having trouble. I'm using version 1.0.23 and was under the impression that SPN auth *was* supported for Backups.

I'm getting an error in Azure DevOps about permissions and I assume the reason is that SPN auth is actually not supported.

 

Can anyone confirm?

 

Message=The service principal with id 'AzureAD ID Redacted' for application does not have permission to access the path 'https://api.bap.microsoft.com/providers/Microsoft.BusinessAppPlatform/environments/56a8d75e-20a9-48f... in tenant ***.; Internal=System.Net.HttpWebResponse}

Anonymous
Not applicable

I am running in the to same issue. I am using version 0.0.23.

 
2021-04-29T22:26:15.2045790Z Task         : Power Platform Backup Environment
2021-04-29T22:26:15.2046092Z Description  : Power Platform Backup Environment
2021-04-29T22:26:15.2046333Z Version      : 0.0.23
2021-04-29T22:26:15.2046761Z Author       : Microsoft
2021-04-29T22:26:15.2047066Z Help         : [More Info](https://aka.ms/buildtoolsdoc)
 
Message=The service principal with id 'GUID' for application  does not have permission to access the path 'https://api.bap.microsoft.com/providers/Microsoft.BusinessAppPlatform/environments/GUID/backups?api-...}

I just broke down and created another generic service connection in AzureDevOps (Username/password). The unfortunate thing is that MFA can't be used with the U/P service connection and you end up having two for a single environment. Not optimal of course.

JeffCarma
Helper I
Helper I

To close the loop on this one. It seems the latest update now allows you to use service principal auth and use the Power platform Backup Environment task to do backups in your own tenant. I have been able to remove all the Generic username/password Service connections from my DevOps instance. 

sit-md
Regular Visitor

@JeffCarma Did you actually test this successfully? The option to use a service principal has been around for a while but when actually executing the task so far I've always ran into an error. Would be wonderful if that finally works as expected.

JeffCarma
Helper I
Helper I

Yes @sit-md , I converted all of my Backup steps last week to Service Principal authentication. Unless there's something going on I can't see, it seems to be working for me. I just ran a backup to show you it worked.

Is it still not working for you?

 

JeffCarma_0-1629299186564.png

Here's a snip from the job step output during the execution.

JeffCarma_2-1629299335904.png

 

JeffCarma_1-1629299233903.png

 

Unfortunately I still get an error message (probably due to a lack of permissions):

 

The service principal with id '***' for application *** does not have permission to access the path 'https://api.bap.microsoft.com/providers/Microsoft.BusinessAppPlatform/environments/***/backups?api-v...' in tenant ***.; Internal=System.Net.HttpWebResponse"
 
Any ideas what permission is missing for the service principal?

Helpful resources

Announcements
Power Platform Conf 2022 768x460.jpg

Join us for Microsoft Power Platform Conference

The first Microsoft-sponsored Power Platform Conference is coming in September. 100+ speakers, 150+ sessions, and what's new and next for Power Platform.

Power Platform Call June 2022 768x460.png

Power Platform Community Call

Join us for the next call on June 15, 2022 at 8am PDT.

PA Virtual Workshop Carousel 768x460.png

Register for a Free Workshop

This training provides practical hands-on experience in creating Power Apps solutions in a full-day of instructor-led App creation workshop.

PA.JPG

New Release Planning Portal (Preview)

Check out our new release planning portal, an interactive way to plan and prepare for upcoming features in Power Platform.

Top Kudoed Authors
Users online (2,670)