1

I have test TSI preview environment in azure connected to an IoTHub. I am experimenting with the TSI test APIs, however, there seems to be something I am doing wrong.

Here are the things that I did.

  1. Created a Service Principal
  2. Gave it access to my resource group with the TSI instance
  3. Using API https://login.microsoftonline.com/{{tenantId}}/oauth2/token to login and obtain a token.
  4. On the portal, it does not allow me to create a Data access policy for a Service Principle but the AZ CLI does, so I created one.
  5. My postman screenshot is given below, I am using the dataaccesFQDN as the prefix, and I have verified the environment ID as well.
    1. However, all the APIs call return,

{ "error": { "code": "ResourceNotFound", "message": "Environment with id 'a5442850-c542-4602-a289-5ec1e1064280' is not found." } }

Any thoughts on whats going wrong?

enter image description here

Sankar Bhavan
  • 11
  • 1
  • AZ Time Series Insights GA or Preview, both explains same how to [Authenticate & Authorize](https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-authentication-and-authorization). I have used the [C# code](https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-authentication-and-authorization#client-app-initialization) to get the Bearer Token, **no issues** reported for Get call 'https://d0ertyh7f-e60f-abc-9345-9321345b37a4567.env.timeseries.azure.com/availability?api-version=2018-11-01-preview'. let me know if more info is needed. – SatishBoddu May 13 '20 at 02:34

2 Answers2

3

To get a token for the TSI API you need to register an application in your Azure active directory, the command for that is this:

az ad app create --display-name myAppName
// for more options like replyUrls or roles refer to https://learn.microsoft.com/en-us/cli/azure/ad/app?view=azure-cli-latest#az-ad-app-create

or if you want to do it using the portal you can follow these steps here Register Application Using Azure Portal

Next step is to create a password credential for the registered app, using this command in your power-shell

$startDate = Get-Date
$endDate = $startDate.AddYears(3)
$aadAppsecret = New-AzureADApplicationPasswordCredential -ObjectId <ObjectId of your registered application> -CustomKeyIdentifier "myPassword" -StartDate $startDate -EndDate $endDate

If you check the value of $aadAppsecret you should get the password which you will then use in your postman so you need to store it somewhere for later.

If you are unsure of how to get your ObjectId use this command:

az ad app list --display-name myAppName

Next step is to give the application an access to your TSI environment which you have done in your point 2

Finally in your postman do a POST request to

https://login.microsoftonline.com/<Tenant Id>/oauth2/token

And the body of the request should contain the following :

grant_type : client_credentials
client_id : <your registered appId>
client_secret : <the password you generated earlier>
resource: https://api.timeseries.azure.com/

Screenshot of the Postman Request

Mohamad Sobhie
  • 131
  • 6
0

Try using https://login.microsoftonline.com/{tenantId}

remove the /oauth2/token

Torched90
  • 305
  • 1
  • 3
  • 18