Publish Classification Model to Libraries using AAD application (via certificate)

[Lewin8687]

We would like to use AAD application with a self-signed certificate to publish a classification model to libraries, is this possible?

Based on my testing, I got 403 error.

Stack trace:
at PnP.Core.Services.BatchClient.ProcessSharePointRestBatchResponseContent(Batch batch, String batchResponse)
at PnP.Core.Services.BatchClient.d__46.MoveNext()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at PnP.Core.Services.BatchClient.d__44.MoveNext()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at PnP.Core.Services.BatchClient.d__34.MoveNext()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at PnP.Core.Model.BaseDataModel1.d__88.MoveNext()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at PnP.Core.Model.BaseDataModel1.d__91.MoveNext()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at PnP.Core.Model.SharePoint.SyntexModel.<PublishModelApiCallAsync>d__33.MoveNext() at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd(Task task) at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult()
at PnP.Core.Model.SharePoint.SyntexModel.d__31.MoveNext()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd(Task task)
at System.Runtime.CompilerServices.ConfiguredTaskAwaitable1.ConfiguredTaskAwaiter.GetResult() at PnP.Core.Model.SharePoint.SyntexModel.<PublishModelAsync>d__21.MoveNext() at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter1.GetResult()
at Genesis.AI.Classification.Syntex.ClassificationProvider.d__14.MoveNext() in F:\THEMIS\THEMIS ICE\Genesis.AI.Classification.Syntex\ClassificationProvider.cs:line 418
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Genesis.AI.Classification.Syntex.ClassificationProvider.d__8.MoveNext() in F:\THEMIS\THEMIS ICE\Genesis.AI.Classification.Syntex\ClassificationProvider.cs:line 201
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Genesis.AI.Jobs.SetupClassificationSyntexJob.d__6.MoveNext() in F:\THEMIS\THEMIS ICE\Genesis.AI.Jobs\SetupClassificationSyntexJob.cs:line 137
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.GetResult()

Here is the consented permissions for the AAD application.

Is it missing required permissions? Or its only possible to publish models using username/password?

Thanks in advance!

[jansenbe]

Might be that these api's don't support app-only, I'll check with the development team

[jansenbe]

@Lewin8687 : forget the above, I could reproduce your issue. The license check works using application permissions, but the actual model apply failed with the error you see as well. I'll follow-up with engineering.

[Lewin8687]

@jansenbe Thanks for the reply. Yes, we do have syntex license and we have been using the content center site for months now.

At first we were using sp app-only (client id/secret) for authentication, then at some point it failed and we had to switch to username/password. Now we would like to see if app-only with certificate would work or not.

[Lewin8687]

@jansenbe Hi, is there any updates? Thanks

[jansenbe]

@Lewin8687 : currently this API only works with delegated permissions, but I'm making the case the enable app-only as well as it makes no sense to not allow that. Once I've more information I'll update here.

Thanks for using PnP Core SDK 👍

[Lewin8687]

@jansenbe Thanks, good to know! It would be nice to have a note in the documentation. I am going to try the delegated permissions.