Consuming Azure REST API in C# application shows no response

Question

When I try a azure rest api url on azure docs post man, I am able to get a json which has all the resource groups. https://learn.microsoft.com/en-us/rest/api/resources/resourcegroups/list#code-try-0 a link

But I am trying it from a ASP.NET MVC Core C# application, I am receiving an empty array.

    public async Task<ResourceGroupModel> GetResourceGroupStatus()
    {
        ResourceGroupModel resourceGroupModel = null;
        try         
        { 
            string requestUrlString = iconfiguration.GetValue<string>("HealthSettings:AzureGetResourcesBySubscriptionURL");
            string azureSubscription = iconfiguration.GetValue<string>("HealthSettings:AzureSubscription");
            string clientId = iconfiguration.GetValue<string>("HealthSettings:ClientId");
            string tenantId = iconfiguration.GetValue<string>("HealthSettings:TenantId");
            string clientSecret = iconfiguration.GetValue<string>("HealthSettings:ClientSecret");
            Uri requestUrl = new Uri(requestUrlString.Replace("{subscriptionId}", azureSubscription));

            string token = await GetAccessToken(tenantId, clientId, clientSecret);

            _httpClient.DefaultRequestHeaders.Remove("Authorization");
            _httpClient.DefaultRequestHeaders.Add("Authorization", "Bearer " + token);

            var response = _httpClient.GetAsync(requestUrl);

            if (response.Result.IsSuccessStatusCode)
            {
                var data = response.Result.Content.ReadAsStringAsync();
                resourceGroupModel = ResourceGroupModel.FromJson(data.Result.ToString());
            }
        }
        catch (Exception ex)
        {
        }
        return resourceGroupModel;
    }

Could you please help me to get rid of strange behavior of Azure REST API. Many thanks in advance. :)

Can you also show the ResourceGroupModel class (with FromJson method also)? — Florin-Constantin Ciubotariu, Jun 11 '19 at 19:03
Are you using a service principal in order to call this API? — Florin-Constantin Ciubotariu, Jun 11 '19 at 19:10
Yes, I am using service principle to call the Azure REST API. — Srikanth Y., Jun 11 '19 at 19:17
@joeryCai I have added myself as contributor in IAM of the subscruption, but no luck, I am still receiving an empty array — Srikanth Y., Jun 13 '19 at 22:33

score 0 · Answer 1 · answered Jun 11 '19 at 19:40

Your service principal does not have access to the resource group.

Log into Azure Portal and select the Resource Group
Select Access control (IAM) from the Blade
On Check access tab, Add a role assignment
Give your service principal a role (Owner/Contributor/Reader)
Assign access to: Azure AD user, group, or service principal
Type your Service Principal name, search and select it then Save.
Wait a couple of minutes and try again calling your API.

Thanks for providing steps, but it didn't helped me :( – Srikanth Y. Jun 13 '19 at 22:10 — Srikanth Y., Jun 13 '19 at 22:10

Joey Cai · Answer 2 · 2019-06-14T07:11:56.893

As Ciubotariu said, your service principal does not have access to the resource group. However, if you only add your service principal to the resource group, you could only get the specify resource group. So, add your service principal to your Subscription. Here are the steps:

1.Go to your subscription, click Access Control> Add(Add role assignment)

2.Add your service principal and assign a role to it like Contributor.

3.Then you will get all the resource groups for a subscription.

Update:

4.Here is the full code I used:

var appId = "xxxxxxxxxxxxxxx";
var secretKey = "xxxxxxxxxxxxxxxxxxxxx";
var tenantId = "xxxxxxxxxxxxxxxxx";
var context = new AuthenticationContext("https://login.windows.net/" + tenantId);
ClientCredential clientCredential = new ClientCredential(appId, secretKey);
var tokenResponse = context.AcquireTokenAsync("https://management.azure.com/", clientCredential).Result;
var accessToken = tokenResponse.AccessToken;
using (var client = new HttpClient())
{
    client.DefaultRequestHeaders.Add("Authorization", "Bearer " + accessToken);
    var baseUrl = new Uri($"https://management.azure.com/");
    var requestURl = baseUrl +
                    @"subscriptions/xxxxxxxxxxxxxxxx/resourcegroups?api-version=2019-05-01";
    var response = client.GetAsync(requestURl).Result.Content.ReadAsStringAsync().Result;
}

I have added myself as contributor in IAM of the subscruption, but no luck, I am still receiving an empty array. — Srikanth Y., Jun 13 '19 at 22:10
Do you add the service principal you registered in subscription? I recreate a new sp and it works well after several minutes. — Joey Cai, Jun 14 '19 at 01:52

score 0 · Accepted Answer · answered Jun 15 '19 at 20:00

0

Deleting the existing clientsecret and creating new one for service principle solved the issue.

answered Jun 15 '19 at 20:00

Srikanth Y.

73
10

Consuming Azure REST API in C# application shows no response

3 Answers3