Article - CS377344

Error while fetching sas token is thrown when multiple subscriptions with Azure Blob using MSI authentication strategy in Windchill PDMLink

Modified: 25-Sep-2025   


Applies To

  • Windchill PDMLink 12.0 to 12.1

Description

Error while fetching sas token is thrown when multiple subscriptions with Azure Blob using MSI authentication strategy
The error below is printed in Method server log:
 
date/time ERROR [] com.ptc.windchill.objectstorage.azureblob.BlobUtilities wcadmin - Error while fetching sas token. Received below response:-

{"error":{"code":"AuthorizationFailed","message":"The client 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' with object id xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' does not have authorization to perform action 'Microsoft.Storage/storageAccounts/listServiceSas/action' over scope '/subscriptions/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/resourceGroups/null/providers/Microsoft.Storage/storageAccounts/vcsprdeuw' or the scope is invalid. If access was recently granted, please refresh your credentials."}}

date/time ERROR []Exception caught. (com.ptc.windchill.objectstorage.azureblob.blobResource/FAILURE_FETCHING_SAS_TOKEN) com.ptc.windchill.objectstorage.azureblob.exception.BlobException: Failed to fetch 'Shared Access Signature' for blob "/blob/vcsprdeuw/vcsblob/xxxxxxxxxxxxxx/522/output_522.zip". Check server logs for more details. at com.ptc.windchill.objectstorage.azureblob.BlobUtilities.fetchSASToken(BlobUtilities.java:412)
This is a printer-friendly version of Article 377344 and may be out of date. For the latest version click CS377344