IAM Permision Denied - Dialog flow Gcloud Twilio Integration - dialogflow-es

Currently i am trying integrate twilio with dialog flow by running in GCloud.
I am facing below error.
2021-02-01 12:12:58.223 HKT(node:14) UnhandledPromiseRejectionWarning: Error: 7 PERMISSION_DENIED: IAM permission 'dialogflow.sessions.detectIntent' on 'projects/sample1-ecji/agent' denied.
Already added Dialogflow Client API & Dialogflow Client Admin
Please advise

Issue resolved. I didn't use the correct service account .
Now it is working after using the correct service account.

Related

Microsoft Graph 403 Forbidden when getting /v1.0/me

I'm having a bit of a difficult time trying to figure out what I'm doing wrong. I've registered an application with Azure portal and I keep getting a 403 error after the Oauth2 is completed and when I request the user data when hitting https://graph.microsoft.com/v1.0/me
Full error:
Client error: `GET https://graph.microsoft.com/v1.0/me` resulted in a `403 Forbidden` response:
{"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2022-11-29T21:40:18","request-id":"cc4628ee-4ab4-4eec-8766-9e3290ba4451","client-request-id":"cc4628ee-4ab4-4eec-8766-9e3290ba4451"}}}
I'm using the PHP SDK to do this, and I had it working with another app but with this new app I can't seem to do it.
This is the API Permissions I have available for the Application:
There are so many permissions, i'm not sure why I'm getting 403? I don't see what scope I'm missing? On the PHP SDK side, I've included all the scopes as in the image.
I tried to reproduce the same in my environment.
Here I used client credential flow to get the token
I tried to query the graph /me end point , it requires delegated authentication .
Calling the https://graph.microsoft.com/me endpoint needs a signed-in user and so a delegated permission.
So even if the delegated permission is given , if client credentials flow is used as grant_typy , there will be 403 forbidden error.
I tried the same with authorization code flow and could sign in user and get details successfully.
Another criteria ,I tried the same for users endpoint
https://graph.microsoft.com/v1.0/users
Required permissions:
Here the admin consent is not granted for the User.Read.All application permission
Make sure the application permissions required for your query are granted admin consent directly through portal or during authentication of user account with which the query is made.
Then the request can be queried successfully.
Reference: Get a user - Microsoft Graph v1.0 | Microsoft Learn

Azure Bot deployed but not working error as Invalid AppId passed on token

I have created Azure App service, Bot Channels Registration, Resource group in Azure Portal and also have a LUIS app created.
I have a custom nodejs code that works perfectly in local using bot emulator.
However, when I upload it to the azure using git it is not working, getting error as "Error: Unauthorized. Invalid AppId passed on token:" in bot emulator, it is neither working in test in webchat getting error as "There was an error sending this message to your bot"
It seems like Appid and Password used in the code are just fine.
I have taken appid and pwd from configuration of my App service.
Message endpoint taken from settings of my Bot channels Registration
Are there any other things to be created for my BOT to work.
Kindly suggest
This is resolved after clearing the credentials in my systems credential manager :-)

Access denied error from SES serverless framework

I’m trying to send an email through calling api from lambda function. Everything works fine locally but after deployment, am getting Access Denied error from SES.
You have to give AWS SES access to your Lambda existing role. Just go to
Execution Role
Existing Role
Click on View the on IAM console.
Attach Policies.
Find AWSSESFullAccess role and attach it.

Azure Active Directory, IDX10500: Signature validation failed

I'm attempting to run this sample to authenticate with Azure Active Directory:
https://github.com/Azure-Samples/active-directory-dotnet-webapp-openidconnect
I authenticate fine, and am redirected to my sample site, and then receive this error:
IDX10500: Signature validation failed. Unable to resolve
SecurityKeyIdentifier
I've researched and don't understand what I need to do on my end with this sample to get this running.
Any help would be appreciated!
I hope this helps someone else out, but after getting with a Microsoft support guy and with our Azure administrator, it turned out the app registration was created with SAML instead of OAUTH2 authentication.
Our admin had to delete the app registration in Azure and recreate it with the proper authentication method. As an Azure user and not an admin, there's nothing in there for me to look at to realize this was the issue.

Azure Api Management - OAuth Developer portal request error

In the Developer Portal of Azure Api Management, having selected an API and an endpoint, im getting the following error when authorizing using OAuth:
An error has occurred while authorizing access via Identity (AD):
invalid_request ACS50001: The required field 'resource' is missing.
Im logged in with an administrator account and all the relevant "products" associated.
Any help is most appreciated.
“Resource” is a required parameter for AAD. That should be your APP ID. It must be entered in the “additional request body parameters section” on the OAuth settings page.

Resources