Making Microsoft Dataverse OAuth 2.0 queries using PAD

This example shows how to retrieve top 3 accounts from your Dataverse / Dynamics 365 environment using Power Automate Desktop.

# Get Dataverse Access Token
Variables.ConvertJsonToCustomObject Json: $'''{ \"tenant_id\": \"\", \"url\": \"\", \"client_id\": \"\", \"client_secret\": \"\" }''' CustomObject=> Variables
Web.InvokeWebService.InvokeWebService Url: $'''https://login.microsoftonline.com/%Variables.tenant_id%/oauth2/v2.0/token''' Method: Web.Method.Post Accept: $'''*/*''' ContentType: $'''multipart/form-data; boundary=BoundaryData''' RequestBody: $'''--BoundaryData
Content-Disposition: form-data; name=\"client_id\"

%Variables.client_id%
--BoundaryData
Content-Disposition: form-data; name=\"client_secret\"

%Variables.client_secret%
--BoundaryData
Content-Disposition: form-data; name=\"scope\"

%Variables.url%/.default
--BoundaryData
Content-Disposition: form-data; name=\"grant_type\"

client_credentials
--BoundaryData--''' ConnectionTimeout: 30 FollowRedirection: True ClearCookies: False FailOnErrorStatus: False EncodeRequestBody: False UserAgent: $'''Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20100312 Firefox/3.6''' Encoding: Web.Encoding.AutoDetect AcceptUntrustedCertificates: False ResponseHeaders=> GetTokenWSResponseHeaders Response=> GetTokenWSResponse StatusCode=> GetTokenStatusCode
# Consume Access Token
Variables.ConvertJsonToCustomObject Json: GetTokenWSResponse CustomObject=> GetTokenObj
Web.InvokeWebService.InvokeWebService Url: $'''%Variables.url%/api/data/v9.2/accounts?$top=3''' Method: Web.Method.Get Accept: $'''*/*''' ContentType: $'''multipart/form-data; boundary=BoundaryData''' CustomHeaders: $'''Authorization: Bearer %GetTokenObj.access_token%''' RequestBody: $'''--BoundaryData
Content-Disposition: form-data; name=\"resource\"

%Variables.url%
--BoundaryData
Content-Disposition: form-data; name=\"client_id\"

%Variables.client_id%
--BoundaryData
Content-Disposition: form-data; name=\"client_secret\"

%Variables.client_secret%
--BoundaryData
Content-Disposition: form-data; name=\"grant_type\"

client_credentials
--BoundaryData--''' ConnectionTimeout: 30 FollowRedirection: True ClearCookies: False FailOnErrorStatus: False EncodeRequestBody: False UserAgent: $'''Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20100312 Firefox/3.6''' Encoding: Web.Encoding.AutoDetect AcceptUntrustedCertificates: False ResponseHeaders=> GetAccountsWSResponseHeaders Response=> GetAccountsWSResponse StatusCode=> GetAccountsStatusCode
Variables.ConvertJsonToCustomObject Json: GetAccountsWSResponse CustomObject=> GetAccountsObj
# Show Results
LOOP FOREACH CurrentItem IN GetAccountsObj.value
    Display.ShowMessageDialog.ShowMessage Title: $'''Found Account''' Message: CurrentItem.name Icon: Display.Icon.None Buttons: Display.Buttons.OK DefaultButton: Display.DefaultButton.Button1 IsTopMost: False ButtonPressed=> ButtonPressed
END
# Tested with Power Automate Desktop version 2.15.284.21354

# Get Dataverse Access Token
Variables.ConvertJsonToCustomObject Json: $'''{ \"tenant_id\": \"\", \"url\": \"\", \"client_id\": \"\", \"client_secret\": \"\" }''' CustomObject=> Variables
Web.InvokeWebService Url: $'''https://login.microsoftonline.com/%Variables.tenant_id%/oauth2/v2.0/token''' Method: Web.Method.Post Accept: $'''*/*''' ContentType: $'''multipart/form-data; boundary=BoundaryData''' RequestBody: $'''--BoundaryData
Content-Disposition: form-data; name=\"client_id\"

%Variables.client_id%
--BoundaryData
Content-Disposition: form-data; name=\"client_secret\"

%Variables.client_secret%
--BoundaryData
Content-Disposition: form-data; name=\"scope\"

%Variables.url%/.default
--BoundaryData
Content-Disposition: form-data; name=\"grant_type\"

client_credentials
--BoundaryData--''' ConnectionTimeout: 30 FollowRedirection: True ClearCookies: False FailOnErrorStatus: False EncodeRequestBody: False UserAgent: $'''Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20100312 Firefox/3.6''' Encoding: Web.Encoding.AutoDetect AcceptUntrustedCertificates: False ResponseHeaders=> GetTokenWSResponseHeaders Response=> GetTokenWSResponse StatusCode=> GetTokenStatusCode
# Consume Access Token
Variables.ConvertJsonToCustomObject Json: GetTokenWSResponse CustomObject=> GetTokenObj
Web.InvokeWebService Url: $'''%Variables.url%/api/data/v9.2/accounts?$top=3''' Method: Web.Method.Get Accept: $'''*/*''' ContentType: $'''multipart/form-data; boundary=BoundaryData''' CustomHeaders: $'''Authorization: Bearer %GetTokenObj.access_token%''' RequestBody: $'''--BoundaryData
Content-Disposition: form-data; name=\"resource\"

%Variables.url%
--BoundaryData
Content-Disposition: form-data; name=\"client_id\"

%Variables.client_id%
--BoundaryData
Content-Disposition: form-data; name=\"client_secret\"

%Variables.client_secret%
--BoundaryData
Content-Disposition: form-data; name=\"grant_type\"

client_credentials
--BoundaryData--''' ConnectionTimeout: 30 FollowRedirection: True ClearCookies: False FailOnErrorStatus: False EncodeRequestBody: False UserAgent: $'''Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20100312 Firefox/3.6''' Encoding: Web.Encoding.AutoDetect AcceptUntrustedCertificates: False ResponseHeaders=> GetAccountsWSResponseHeaders Response=> GetAccountsWSResponse StatusCode=> GetAccountsStatusCode
Variables.ConvertJsonToCustomObject Json: GetAccountsWSResponse CustomObject=> GetAccountsObj
# Show Results
LOOP FOREACH CurrentItem IN GetAccountsObj.value
    Display.ShowMessage Title: $'''Found Account''' Message: CurrentItem.name Icon: Display.Icon.None Buttons: Display.Buttons.OK DefaultButton: Display.DefaultButton.Button1 IsTopMost: False ButtonPressed=> ButtonPressed
END
# Tested with Power Automate Desktop version 2.11.51.21196

Instructions

Follow these steps to generate and consume Dataverse OAuth2 v2.0 Endpoint Tokens for Dataverse using Power Automate Desktop (PAD).

Register you application to get client_id and client_secret.
Create an application user and add security roles.
Set JSON values (see flow action line 2). Example:

⠀{
    "tenant_id": "57a86893-3de9-2641-ba9e-e7ad4a434512",
    "url": "https://yourcrminstance.crmX.dynamics.com",
    "client_id": "e2a16e96-83c1-41bf-9381-ef2c30518d4e",
    "client_secret": "_WX6T~lJHeDnk5KPisdIbY~2YqO2Oa1mlep1d"
⠀}

Run flow. This will return top 3 accounts from your Dataverse environment.

Changes

2022-01-01: Updated flow actions to work with Power Automate Desktop version 2.15.284.21354

References

[1]https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app

[2]https://docs.microsoft.com/en-us/power-platform/admin/manage-application-users

[3]https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow

[4]https://crmchap.co.uk/generating-oauth2-v2-0-endpoint-tokens-for-dynamics-365-the-common-data-service/

[5]https://powerusers.microsoft.com/t5/Power-Automate-Desktop/connect-to-google-sheets-for-read-and-write/td-p/884338

Author

PAG Admin