SharePoint / sp-dev-docs

SharePoint & Viva Connections Developer Documentation
https://docs.microsoft.com/en-us/sharepoint/dev/
Creative Commons Attribution 4.0 International
1.25k stars 1.01k forks source link

CreateMigrationJob api not working with ProvisionedMigrationContainersInfo containers and ProvisionedMigrationQueueInfo queue #8972

Open tannguyengithub opened 1 year ago

tannguyengithub commented 1 year ago

Hi all,

Currently I'm facing the problem when I'm using the ProvisionedMigrationContainersInfocontainer uri for Data, the ProvisionedMigrationContainersInfocontainer uri for MetaData and the ProvisionedMigrationQueueInfo uri for Queue to run the api as below

ctx.Site.CreateMigrationJob(webId, importDataContUriStr, importMetaDataContUriStr, importQueueUriStr);

But I got the error

image

As I know, the Uri generated by ProvisionedMigrationContainersInfocontainer is not enough permission. It's missing List permission that is required for this api. And the Uri generated by ProvisionedMigrationQueueInfo is also not enough permission. It's missing SharedAccessQueuePermissions.Update permission.

Uri for Data: https://xxxxx.blob.core.windows.net/0-1623-20230512-1b0c6bae3f21454bbeed44a8822b89cb?sv=2018-03-28&sr=c&sig=gUEUwrSiX5XbZJxTqbuReCrLEqRJxvNnIDAoj1jkJP8%3D&st=2023-05-08T00%3A00%3A00Z&se=2023-05-12T00%3A00%3A00Z&sp=rw

Uri for MetaData: https://xxxx.blob.core.windows.net/0-1623-20230512-572e3a8444a54a6db9301b3a0ff92f0c?sv=2018-03-28&sr=c&sig=0at4KaagpKJh3Jc6mlhQn4I5wYrs9onC1tNgra7GcS8%3D&st=2023-05-08T00%3A00%3A00Z&se=2023-05-12T00%3A00%3A00Z&sp=rw

Uri for queue: https://xxxx.queue.core.windows.net:443/1623pq20230509-b51805b423b14ef4b77a41955bdbeb9c?sv=2018-03-28&sig=rTx4Wo5icJDlYL0Zyrfxy5Fx7BQyIsrsYz0Z12126Qw%3D&st=2023-05-08T00%3A00%3A00Z&se=2023-05-30T00%3A00%3A00Z&sp=rap

Ex: sp=rw (Read and Write), should be sp=rwl Ex: sp=rap (Read,Add and Process), should be sp=rau

Ref: https://learn.microsoft.com/en-us/sharepoint/dev/apis/migration-api-overview

But I could not try to gen another SAS uri token to change the permission

Question: is it possible to make this api works ? Or possible to gen another SAS uri token from ProvisionedMigrationContainersInfocontainer and ProvisionedMigrationQueueInfo

Thanks, //Tan

Originally posted by @tannguyengithub in https://github.com/SharePoint/sp-dev-docs/discussions/8955

ghost commented 1 year ago

Thank you for reporting this issue. We will be triaging your incoming issue as soon as possible.

mattrgibson commented 1 year ago

Very interested in the response @tannguyengithub as I just spent 3-4 hours coming to the same conclusion on permissions. For what it's worth, everything works if I create my own Azure Storage Account with the proper SAS permissions that you listed. I can also get it to work if I use my own containers for data and manifest, but use the SPO provided queue. The minute I try to use the SPO provided containers (either data or manifest, tried all combos), I get the same error.