az devops security permission update

[lokesh-exelaonline]

Describe the bug

getting below error while doing az DevOps repo permissions update command as checked with microsoft devops support team its backend error from git side
TF400898: An Internal Error Occurred. Activity Id: cd9bad3f-4800-4708-b850-14fa7cd88b7e.

Related command

az devops security permission update --allow-bit 1 --namespace-id 2e9eb7ed-3c0a-47d4-87c1-0ffdd275fd87 --subject "vssgp.Uy0xLTktMTU1MTM3NDI0NS0zMTE3MzM1NjQzLTQ3NzM2NDgwOC0yMTQ3NjkzODM2LTQwNDUxNTQ3NTAtMS0zNjU2NDEyOTQyLTM4NDQ1MDAwNDMtMjU2NzMyMTU5Mi02MDA5OTE2MDg" --token "`ICS:vstfs:///Classification/TeamProject/Git/6c48df35-6d16-4223-a936-9671e469004d" --organization (orgname)

Errors

TF400898: An Internal Error Occurred. Activity Id: cd9bad3f-4800-4708-b850-14fa7cd88b7e.

Issue script & Debug output

NA

Expected behavior

NA

Environment Summary

azure-cli 2.55.0 *

core 2.55.0 *
telemetry 1.1.0

Extensions:
azure-devops 1.0.1

Dependencies:
msal 1.24.0b2
azure-mgmt-resource 23.1.0b2

Additional context

No response

[azure-client-tools-bot-prd]

Hi @lokesh-exelaonline,

2.55.0 is not the latest Azure CLI(2.64.0).

If you haven't already attempted to do so, please upgrade to the latest Azure CLI version by following https://learn.microsoft.com/en-us/cli/azure/update-azure-cli.

[yonzhan]

Thank you for opening this issue, we will look into it.

[lokesh-exelaonline]

tried updating the Az CLI version, still the error is same.

PS C:\Users\az_lbhutada> az devops security permission update --allow-bit 1 --namespace-id 2e9eb7ed-3c0a-47d4-87c1-0ffdd275fd87 --subject "vssgp.Uy0xLTktMTU1MTM3NDI0NS0zMTE3MzM1NjQzLTQ3NzM2NDgwOC0yMTQ3NjkzODM2LTQwNDUxNTQ3NTAtMS0zNjU2NDEyOTQyLTM4NDQ1MDAwNDMtMjU2NzMyMTU5Mi02MDA5OTE2MDg" --token "`ICS:vstfs:///Classification/TeamProject/Git/6c48df35-6d16-4223-a936-9671e469004d" --organization {orgname}
az : ERROR: TF400898: An Internal Error Occurred. Activity Id: c727ba6f-f1e3-4182-bb20-3e20ccf46d5e.
At line:1 char:1

• az devops security permission update --allow-bit 1 --namespace-id 2e9 ...

•   + CategoryInfo          : NotSpecified: (ERROR: TF400898...0-3e20ccf46d5e.:String) [], RemoteException
    + FullyQualifiedErrorId : NativeCommandError
  
  

PS C:\Users\az_lbhutada> az version
{
"azure-cli": "2.64.0",
"azure-cli-core": "2.64.0",
"azure-cli-telemetry": "1.1.0",
"extensions": {
"azure-devops": "1.0.1"
}
}
PS C:\Users\az_lbhutada>

[lokesh-exelaonline]

@v-vjanapati , @V-hmusukula can you please help with this issue.

[v-anvashist]

Hi @lokesh-exelaonline

Please note that the security token is wrapped within single quotes.
'$PROJECT:vstfs:///Classification/TeamProject/73d2ba69-da36-4d82-abb1-778c867bc350'

Also please re-install the latest az/dev-ops version and computer/PowerShell restart

If you are still facing the issue.
Could you please the share output of the 'az devops security permission list' command ?

[v-anvashist]

@lokesh-exelaonline executed the command in our windows PowerShell and it is working for us

[lokesh-exelaonline]

Hi Team,
I made the required changes as suggested, still the output I same.
PS C:\Users\lokesh.bhutada> az devops security permission update --allow-bit 1 --id 2e9eb7ed-3c0a-47d4-87c1-0ffdd275fd87 --subject vssgp.Uy0xLTktMTU1MTM3NDI0NS0zMTE3MzM1NjQzLTQ3NzM2NDgwOC0yMTQ3NjkzODM2LTQwNDUxNTQ3NTAtMS0zNjU2NDEyOTQyLTM4NDQ1MDAwNDMtMjU2NzMyMTU5Mi02MDA5OTE2MDg --token '$PROJECT:vstfs:///Classification/TeamProject/c2829811-ce0f-4749-bba4-1a5057299918' --org https://dev.azure.com/XXXX
TF400898: An Internal Error Occurred. Activity Id: da63b8ba-c415-4f50-8342-6ec4b5cc3868.

also attached output file for the requested command as below.
PS C:\Users\lokesh.bhutada\Desktop> az devops security permission list --id 2e9eb7ed-3c0a-47d4-87c1-0ffdd275fd87 --subject vssgp.Uy0xLTktMTU1MTM3NDI0NS0zMTE3MzM1NjQzLTQ3NzM2NDgwOC0yMTQ3NjkzODM2LTQwNDUxNTQ3NTAtMS0zNjU2NDEyOTQyLTM4NDQ1MDAwNDMtMjU2NzMyMTU5Mi02MDA5OTE2MDg --org https://dev.azure.com/XXX | Out-file -FilePath C:\Users\lokesh.bhutada\Desktop\output.txt
output.txt

[v-anvashist]

Hi @lokesh-exelaonline Is this issue for windows or linux PowerShell?

Also, run the "az devops security permission update" with --debug switch and share the logs.

[lokesh-exelaonline]

using Windows Powershell from the beginning, attached the logs for the command as requested and I am also able to list the permission of that specific token with repo ID which means the issue is with only the update command in backend, attached output of both the command PFA
output1.txt