Skip to content

Update prod scope #234

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
gwharris7 wants to merge 1 commit into from
Closed

Update prod scope #234

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion libraries/microsoft-agents-a365-runtime/microsoft_agents_a365/runtime/environment_utils.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
import os

# Authentication scopes for different environments
PROD_OBSERVABILITY_SCOPE = "https://api.powerplatform.com/.default"
PROD_OBSERVABILITY_SCOPE = "api://9b975845-388f-4429-889e-eab1ef63949c/Agent365.Observability.OtelWrite"
Copy link

Copilot AI Apr 20, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The new PROD_OBSERVABILITY_SCOPE value is an explicit permission scope (…/Agent365.Observability.OtelWrite) rather than a resource /.default scope. If callers obtain tokens via client-credentials/managed identity flows, Azure AD typically requires requesting api://<app-id>/.default and will reject individual delegated scopes. Please confirm the intended auth flow for observability export and either switch this constant to the correct /.default scope or document/rename to make it clear this is a delegated scope that requires user context.

Suggested change
PROD_OBSERVABILITY_SCOPE = "api://9b975845-388f-4429-889e-eab1ef63949c/Agent365.Observability.OtelWrite"
PROD_OBSERVABILITY_SCOPE = "api://9b975845-388f-4429-889e-eab1ef63949c/.default"

Copilot uses AI. Check for mistakes.

# Cluster categories for different environments
PROD_OBSERVABILITY_CLUSTER_CATEGORY = "prod"
Expand Down
Loading