microsoft / coe-starter-kit

Other
739 stars 216 forks source link

[ALM Accelerator - BUG]: Error publishing customization #8320

Open minobrega opened 3 months ago

minobrega commented 3 months ago

Describe the issue

Hello,

Please, I'm trying to do the COMMIT SOLUTION and it's giving an error with the following message: Error: Read Privilege Check For Owner failed with exception: RetrievePrivilegeForUser: The user with id 5aa9ce67-370e-ef11-9f89-002248df2fb1 has not used any functions . They need a role with the prvReadAsyncOperation privilege.

Can you help me what this permission would be as the user has access to the environment and the pipeline.

Alm Erro12

Expected Behavior

To make the COMMIT SOLUTION without error

What component are you experiencing the issue with?

ALM Accelerator Canvas App

What solution version are you using?

1.0.20240305.1

Steps To Reproduce

No response

Anything else?

No response

AB#3322

RajeevPentyala commented 3 months ago

@minobrega Can you please double-check the Dataverse security role assigned to the Service Principal account of your DevOps 'Service Connection'? The 'Publish Customizations' task runs under the Service Principal context, and I suspect it may have missing privileges.

minobrega commented 3 months ago

Would it be in this configuration right? My user has access to all connection environments

Erro ALM15

Erro ALM16

What configuration could I see too?

RajeevPentyala commented 3 months ago

@minobrega 'Publish Customizations' is a Dataverse action. The application user you have configured in 'DevOps > Service Connection' must be added as an 'Application User' in Dataverse with appropriate security roles (i.e., System Administrator or System Customizer).

minobrega commented 3 months ago

Do you have a link to the documentation to do this configuration?

MaheshSripada commented 1 month ago

Below is the documentation link on how to create App User

https://learn.microsoft.com/en-us/power-platform/guidance/alm-accelerator/setup-components-manually#create-an-app-user-in-your-dataverse-environments