MS Subcriptions REST API returns empty value-CodePudding

I register a new app to my Azure tenant and then use the Subscription REST API below to get my subscription id. But, it returns an empty value.

Is this a bug of the REST API, or the app is missing some required configurations?

CodePudding user response：

I tried to reproduce the same in my environment and got below results:

I registered one Azure AD application and granted API permission like below:

enter image description here

I generated the access token via Postman using below parameters:

POST https://login.microsoftonline.com/<tenantID>/oauth2/v2.0/token
grant_type:client_credentials
client_id:<appID>
client_secret:<secret>
scope: https://management.azure.com/.default

Response:

enter image description here

When I used the above token to get subscriptions, I got same response as you like below:

GET https://management.azure.com/subscriptions?api-version=2020-01-01
Authorization: Bearer <token>

Response:

enter image description here

To get the desired results, make sure to assign required role like Reader to the service principal under your subscription like below:

Go to Azure Portal -> Subscriptions -> Your Subscription -> Access control (IAM) -> Add role assignment

enter image description here

Now I generated token again and got the subscription details like ID successfully with below API call:

GET https://management.azure.com/subscriptions?api-version=2020-01-01
Authorization: Bearer <token>

Response:

enter image description here

If you want to list all subscriptions, then assign Reader role to your service principal under management group level instead of specific subscription.