Dataverse API authentication Issue

[JeezyB0Y]

Here's the combined statement for the PowerApps community:

---

"I'm encountering a specific issue with authentication in my development environment. I have a Dataverse table named 'abcd table,' and I'm the owner of this environment. Recently, I granted system admin rights to another user named Ansa. Ansa can access the table using the user interface (UI) without any problems. However, when attempting to access the table through API calls in Postman, there's an authentication issue. Interestingly, the API calls work for me without any authentication loop. The problem arises when Ansa tries to authenticate; the process loops, repeatedly asking for credentials despite successful initial authentication. I'm puzzled by this behaviour and need assistance in resolving this authentication issue, especially considering that I'm using my Organization account.

I explored an alternative using the Azure AD method. I registered the app and used its credentials for authentication, which worked for me but not for Ansa. Additionally, I ensured that Ansa is added as a user in AD users and groups. However, as I'm new to this, I may have overlooked some essential steps.

Before seeking help from the community, I exhaustively explored various options. Now, I'm hoping to find a solution here.

1. Can someone guide me on reviewing the options to verify correct user permissions and settings, both from a Dataverse and Azure AD perspective? I'd appreciate details on where to add the user and specific options to check, even if they are basic.

2. I have taken delegated permissions for Dynamic CRM in API permissions for AD. Will this suffice for real-time integration with external systems through API calls (considering my main goal is to integrate Dataverse with Prometheus)? If delegated permissions are not sufficient, please advise on the exact steps needed.

3. Alternatively, is there another approach to integrating Dataverse with Prometheus that would circumvent these authentication issues?"

If you need any further clarifications/specifics I will reply with the details. Since everything cannot be incorporated in this.

[JeezyB0Y · Accepted solution]

The issue is resolved. I used python’s MSAL library’s ConfidentialClientApplication method to authenticate Dataverse using AD’s creds and requested JSON and then used it for exposition format for ingestion in Prometheus.