azure - 在 Azure DevOps 管道中创建版本时获取 "The remote server returned an error: (401) Unauthorized."

Question

当我点击“创建版本”时出现以下错误

2020-03-16T20:19:34.4515940Z Logging in with a Service Principal
2020-03-16T20:19:34.9209641Z Publishing PowerBI FIle: D:\a\r1\a\_PowerBI\drop\PowerBI, in workspace: contoso with user: 
2020-03-16T20:19:35.0059635Z Getting Power BI Workspace properties; contoso
2020-03-16T20:19:35.6190535Z ##[error]The remote server returned an error: (401) Unauthorized.
2020-03-16T20:19:35.6575457Z ##[section]Finishing: Power BI Action: Publish

我尝试了“用户”和“服务主体”，当我选择“服务主体”时出现此错误

谢谢

Answer 1

根据错误日志，看起来您正在使用此第 3 方扩展 -- Power BI Actions

To configure a Service Principal with PowerBI you will have to go through this guide:Service principal with Power BI

• ClientId: The client id of the Azure Active Directory application. This application should have the appropriate rights in order to use the Power BI Api.
• ClientSecret: The client secret of the application
• Tenant ID: The identifier of the Azure Active Directory tenant

服务主体仅充当 Azure AD 中用户的模拟。如果ServicePrincipal没有相应的权限，则需要在创建时勾选。

给你:Use portal to create an Azure Active Directory application and service principal that can access resources .

When you have an application that needs to access or modify resources, you must set up an Azure Active Directory (AD) application and assign the required permissions to it. This approach is preferable to running the app under your own credentials because:

• You can assign permissions to the app identity that are different than your own permissions. Typically, these permissions are restricted to exactly what the app needs to do.
• You do not have to change the app's credentials if your responsibilities change.
• You can use a certificate to automate authentication when executing an unattended script.