Monday, March 23, 2020

Get-AzKeyVaultSecret failing with 'Forbidden'

While preparing the pipeline scripts for the current project, I was not able to fetch the secrets form our KeyVault via Powershell using Get-AzKeyVaultSecret.

The Access Policies have been configured correctly and I was owner of the subscription.

Unfortunately, the KeyVault requires explicit 'owner' permissions on KeyVault level to make this work.



Error
Get-AzKeyVaultSecret : Operation returned an invalid status code 'Forbidden'

Solution
Grant owner permissions (temporarily) to your AD-User on KV-Level.

Cheers

Monday, December 2, 2019

Dynamics365 CE (CRM) Object Type Codes

Since there is still not official list on MSDN, publishing my own D365 ObjectTypeCode list.
Also as a personal reference. ;)

The source system was 8.2.3.8 On Premise.

  • Excel

  • ObjectTypeCode LogicalName
    1 account
    2 contact
    3 opportunity
    4 lead
    5 annotation
    6 businessunitmap
    7 owner
    8 systemuser
    9 team
    10 businessunit
    11 principalobjectaccess
    12 roleprivileges
    13 systemuserlicenses
    14 systemuserprincipals
    15 systemuserroles
    16 accountleads
    17 contactinvoices
    18 contactquotes
    19 contactorders
    20 servicecontractcontacts
    21 productsalesliterature
    22 contactleads
    23 teammembership
    24 leadcompetitors
    25 opportunitycompetitors
    26 competitorsalesliterature
    27 leadproduct
    28 roletemplateprivileges
    29 subscription
    30 filtertemplate
    31 privilegeobjecttypecodes
    32 salesprocessinstance
    33 subscriptionsyncinfo
    35 subscriptiontrackingdeletedobject
    36 clientupdate
    37 subscriptionmanuallytrackedobject
    39 sharedobjectsforread
    40 teamroles
    41 principalentitymap
    42 systemuserbusinessunitentitymap
    43 principalattributeaccessmap
    44 principalobjectattributeaccess
    45 subscriptionstatisticsoffline
    46 subscriptionstatisticsoutlook
    47 subscriptionsyncentryoffline
    48 subscriptionsyncentryoutlook
    50 position
    51 systemusermanagermap
    52 usersearchfacet
    90 principalobjectaccessreadsnapshot
    91 recordcountsnapshot
    92 teamtemplate
    99 socialprofile
    112 incident
    113 childincidentcount
    123 competitor
    126 documentindex
    127 kbarticle
    129 subject
    132 businessunitnewsarticle
    135 activityparty
    150 usersettings
    950 newprocess
    951 translationprocess
    952 phonetocaseprocess
    953 opportunitysalesprocess
    954 leadtoopportunitysalesprocess
    955 expiredprocess
    1001 activitymimeattachment
    1002 attachment
    1003 internaladdress
    1004 competitoraddress
    1006 competitorproduct
    1007 imagedescriptor
    1010 contract
    1011 contractdetail
    1013 discount
    1016 kbarticletemplate
    1017 leadaddress
    1019 organization
    1021 organizationui
    1022 pricelevel
    1023 privilege
    1024 product
    1025 productassociation
    1026 productpricelevel
    1028 productsubstitute
    1030 systemform
    1031 userform
    1036 role
    1037 roletemplate
    1038 salesliterature
    1039 savedquery
    1043 stringmap
    1048 dynamicproperty
    1049 dynamicpropertyoptionsetitem
    1055 uom
    1056 uomschedule
    1070 salesliteratureitem
    1071 customeraddress
    1072 subscriptionclients
    1075 statusmap
    1080 discounttype
    1082 kbarticlecomment
    1083 opportunityproduct
    1084 quote
    1085 quotedetail
    1086 userfiscalcalendar
    1088 salesorder
    1089 salesorderdetail
    1090 invoice
    1091 invoicedetail
    1094 authorizationserver
    1095 partnerapplication
    1111 savedqueryvisualization
    1112 userqueryvisualization
    1113 ribbontabtocommandmap
    1115 ribboncontextgroup
    1116 ribboncommand
    1117 ribbonrule
    1120 ribboncustomization
    1130 ribbondiff
    1140 replicationbacklog
    1141 characteristic
    1142 ratingvalue
    1144 ratingmodel
    1145 bookableresourcebooking
    1146 bookableresourcebookingheader
    1147 bookableresourcecategory
    1148 bookableresourcecharacteristic
    1149 bookableresourcecategoryassn
    1150 bookableresource
    1151 bookableresourcegroup
    1152 bookingstatus
    1189 recommendeddocument
    1200 fieldsecurityprofile
    1201 fieldpermission
    1202 systemuserprofiles
    1203 teamprofiles
    1213 queuemembership
    1234 channelpropertygroup
    1235 dynamicpropertyassociation
    1236 channelproperty
    1300 socialinsightsconfiguration
    1309 savedorginsightsconfiguration
    1333 dynamicpropertyinstance
    1400 syncattributemappingprofile
    1401 syncattributemapping
    1402 systemusersyncmappingprofiles
    1403 teamsyncattributemappingprofiles
    1404 principalsyncattributemap
    2000 annualfiscalcalendar
    2001 semiannualfiscalcalendar
    2002 quarterlyfiscalcalendar
    2003 monthlyfiscalcalendar
    2004 fixedmonthlyfiscalcalendar
    2010 template
    2011 contracttemplate
    2012 unresolvedaddress
    2013 territory
    2015 theme
    2016 usermapping
    2020 queue
    2023 queueitemcount
    2024 queuemembercount
    2027 license
    2029 queueitem
    2500 userentityuisettings
    2501 userentityinstancedata
    3000 integrationstatus
    3005 channelaccessprofile
    3008 externalparty
    3231 connectionrole
    3232 connectionroleassociation
    3233 connectionroleobjecttypecode
    3234 connection
    4000 equipment
    4001 service
    4002 resource
    4003 calendar
    4004 calendarrule
    4005 resourcegroup
    4006 resourcespec
    4007 constraintbasedgroup
    4009 site
    4010 resourcegroupexpansion
    4011 interprocesslock
    4023 emailhash
    4101 displaystringmap
    4102 displaystring
    4110 notification
    4120 exchangesyncidmapping
    4200 activitypointer
    4201 appointment
    4202 email
    4204 fax
    4206 incidentresolution
    4207 letter
    4208 opportunityclose
    4209 orderclose
    4210 phonecall
    4211 quoteclose
    4212 task
    4214 serviceappointment
    4215 commitment
    4216 socialactivity
    4220 untrackedemail
    4230 userquery
    4231 metadatadifference
    4232 businessdatalocalizedlabel
    4250 recurrencerule
    4251 recurringappointmentmaster
    4299 emailsearch
    4300 list
    4301 listmember
    4400 campaign
    4401 campaignresponse
    4402 campaignactivity
    4403 campaignitem
    4404 campaignactivityitem
    4405 bulkoperationlog
    4406 bulkoperation
    4410 import
    4411 importmap
    4412 importfile
    4413 importdata
    4414 duplicaterule
    4415 duplicaterecord
    4416 duplicaterulecondition
    4417 columnmapping
    4418 picklistmapping
    4419 lookupmapping
    4420 ownermapping
    4421 bookableresourcebookingexchangesyncidmapping
    4423 importlog
    4424 bulkdeleteoperation
    4425 bulkdeletefailure
    4426 transformationmapping
    4427 transformationparametermapping
    4428 importentitymapping
    4450 dataperformance
    4490 officedocument
    4500 relationshiprole
    4501 relationshiprolemap
    4502 customerrelationship
    4503 customeropportunityrole
    4545 entitlementtemplateproducts
    4567 audit
    4600 entitymap
    4601 attributemap
    4602 plugintype
    4603 plugintypestatistic
    4605 pluginassembly
    4606 sdkmessage
    4607 sdkmessagefilter
    4608 sdkmessageprocessingstep
    4609 sdkmessagerequest
    4610 sdkmessageresponse
    4611 sdkmessageresponsefield
    4613 sdkmessagepair
    4614 sdkmessagerequestfield
    4615 sdkmessageprocessingstepimage
    4616 sdkmessageprocessingstepsecureconfig
    4618 serviceendpoint
    4619 plugintracelog
    4700 asyncoperation
    4702 workflowwaitsubscription
    4703 workflow
    4704 workflowdependency
    4705 isvconfig
    4706 workflowlog
    4707 applicationfile
    4708 organizationstatistic
    4709 sitemap
    4710 processsession
    4712 processtrigger
    4724 processstage
    4725 businessprocessflowinstance
    4800 webwizard
    4802 wizardpage
    4803 wizardaccessprivilege
    4810 timezonedefinition
    4811 timezonerule
    4812 timezonelocalizedname
    6363 entitlementproducts
    7000 systemapplicationmetadata
    7001 userapplicationmetadata
    7100 solution
    7101 publisher
    7102 publisheraddress
    7103 solutioncomponent
    7105 dependency
    7106 dependencynode
    7107 invaliddependency
    7108 dependencyfeature
    7272 entitlementcontacts
    8000 post
    8001 postrole
    8002 postregarding
    8003 postfollow
    8005 postcomment
    8006 postlike
    8050 tracelog
    8051 traceassociation
    8052 traceregarding
    8181 routingrule
    8199 routingruleitem
    8840 hierarchyrule
    9006 appmodule
    9007 appmodulecomponent
    9009 appmoduleroles
    9100 report
    9101 reportentity
    9102 reportcategory
    9103 reportvisibility
    9104 reportlink
    9105 transactioncurrency
    9106 mailmergetemplate
    9107 importjob
    9201 localconfigstore
    9300 convertrule
    9301 convertruleitem
    9333 webresource
    9400 channelaccessprofilerule
    9401 channelaccessprofileruleitem
    9404 channelaccessprofileentityaccesslevel
    9502 sharepointsite
    9507 sharepointdocument
    9508 sharepointdocumentlocation
    9509 sharepointdata
    9510 rollupproperties
    9511 rollupjob
    9600 goal
    9602 goalrollupquery
    9603 metric
    9604 rollupfield
    9605 emailserverprofile
    9606 mailbox
    9607 mailboxstatistics
    9608 mailboxtrackingfolder
    9609 mailboxtrackingcategory
    9613 sqlencryptionaudit
    9650 complexcontrol
    9699 orginsightsmetric
    9700 entitlement
    9701 entitlementchannel
    9702 entitlementtemplate
    9703 entitlementtemplatechannel
    9750 sla
    9751 slaitem
    9752 slakpiinstance
    9753 customcontrol
    9754 customcontrolresource
    9755 customcontroldefaultconfig
    9866 mobileofflineprofile
    9867 mobileofflineprofileitem
    9868 mobileofflineprofileitemassociation
    9869 syncerror
    9910 multientitysearch
    9911 multientitysearchentities
    9919 hierarchysecurityconfiguration
    9930 knowledgebaserecord
    9931 incidentknowledgebaserecord
    9932 timestampdatemapping
    9933 recommendationmodel
    9934 recommendationmodelmapping
    9935 recommendationmodelversion
    9936 azureserviceconnection
    9937 recommendationmodelversionhistory
    9938 recommendationcache
    9940 documenttemplate
    9941 personaldocumenttemplate
    9942 topicmodelconfiguration
    9943 topicmodelexecutionhistory
    9944 topicmodel
    9945 textanalyticsentitymapping
    9946 topichistory
    9947 knowledgesearchmodel
    9948 topic
    9949 advancedsimilarityrule
    9950 officegraphdocument
    9951 similarityrule
    9953 knowledgearticle
    9954 knowledgearticleincident
    9955 knowledgearticleviews
    9957 languagelocale
    9958 feedback
    9959 category
    9960 knowledgearticlescategories
    9961 delveactionhub
    9962 actioncard
    9968 actioncarduserstate
    9973 actioncardusersettings
    9983 cardtype
    9986 interactionforemail
    9987 externalpartyitem
    9997 emailsignature
    10000 msdyn_postalbum
    10001 msdyn_postconfig
    10002 msdyn_postruleconfig
    10003 msdyn_wallsavedquery
    10004 msdyn_wallsavedqueryusersettings

Cheers