最近新创建了一个sandbox, 想使用power automate中的approval做审批功能.

但是新环境下一直初始化失败. 并且有以下报错. 最后发现power automate中的审批是使用的environment中一个额外的叫MicrosoftFlowCDSIntegrationService 的用户来处理. 并且这个用户是需要approval administrator这个security role.  但是approval administrator的security role default状态下是没有system job的权限. 所以导致了以下的报错.

我们只需要给最低read only权限即可.

{
  "error": {
    "code": 502,
    "source": "asia-001.azure-apim.net",
    "clientRequestId": "GUID",
    "message": "BadGateway",
    "innerError": {
      "error": {
        "code": "XrmApiServerError",
        "message": "Request to XRM API failed with server error: 'The cache request to assign a role failed with status code 'BadRequest' and message: 'Message: Principal user (Id=GUID, type=8, roleCount=1, privilegeCount=94, accessMode=4), is missing prvReadAsyncOperation privilege (Id=GUID) on OTC=4700 for entity 'asyncoperation'. context.Caller=GUID\nCode: 0x80040299\nInnerError: '.'. The tracking Id is 'GUID'."
      }
    }
  }
}