CloudShell
CloudShell copied to clipboard
[BUG] Azure Purview audience not supported
To Reproduce
curl http://localhost:50342/oauth2/token --data "resource=https://purview.azure.net/" -H Metadata:true -s
Observed Behavior
{"error":{"code":"AudienceNotSupported","message":"Audience https://purview.azure.net/ is not a supported MSI token audience. Supported audiences: https://management.core.windows.net/,https://management.azure.com/,https://graph.windows.net/,https://vault.azure.net,https://datalake.azure.net/,https://outlook.office365.com/,https://graph.microsoft.com/,https://batch.core.windows.net/,https://analysis.windows.net/powerbi/api,https://storage.azure.com/,https://rest.media.azure.net,https://api.loganalytics.io,https://ossrdbms-aad.database.windows.net,https://www.yammer.com,https://digitaltwins.azure.net,0b07f429-9f4b-4714-9392-cc5e8e80c8b0,822c8694-ad95-4735-9c55-256f7db2f9b4,https://dev.azuresynapse.net,https://database.windows.net,https://quantum.microsoft.com,https://iothubs.azure.net,2ff814a6-3304-4ab8-85cb-cd0e6f879c1d,https://azuredatabricks.net/,ce34e7e5-485f-4d76-964f-b3d2b16d1e4f,https://azure-devices-provisioning.net"}}
Expected Behavior
An access token.
Is this specific to Cloud Shell?
Yes.
Interface information
https://portal.azure.com
Additional context
Similar to Issue #109
AB#14503495
@Cheneric95 - Are we able to please add https://purview.azure.net/ as a supported audience (similar to what you did previously for Databricks #109 ).
Also relates to https://github.com/Azure/CloudShell/issues/220 as we want to add "499b84ac-1321-427f-aa17-267ca6975798/user_impersonation" as a supported token scope.
@robins1212 , can you validate that this audience in in place?