HubSiteUrl not being set with delegated permission

[oliver-tbs]

Hello,

I have an Azure function app that calls the ApplyProvisioningTemplate method to apply a template file to a Web object. I use a parameter field to set the value of HubSiteUrl in the WebSettings section of the template.

The value is set correctly when using SharePoint API permission of type Application (Sites.FullControl.All). However, the value is not set when using permission of type Delegated (AllSites.FullControl).

Any idea why this happens?

Thanks!

Oliver

[oliver-tbs]

@jansenbe

OK after adding a MessagesDelegate property to the call I now get this warning:

You need to be a SharePoint admin when associating to a Hub site.

The delegated user has the Sharepoint Administrator role in AAD and is also part of the Site Collection Administrator group for the site. Is this referring to some other property/role/setting?

Thanks!

Oliver

[JakeStanger]

1 year later, I've struck the same thing with the same setup, except with application permissions instead of delegated. I have found the following check is responsible:

var adminSiteUrl = clientContext.Web.GetTenantAdministrationUrl();
  try
  {
      // Connect to the Admin Site
      using (var adminContext = clientContext.Clone(adminSiteUrl))
      {
          // Do something with the Tenant Admin Context
          Tenant tenant = new Tenant(adminContext);
          tenant.EnsureProperty(t => t.RootSiteUrl);

          // If we've got access to the tenant admin context, 
          // it means that the currently connecte user is an admin
          return (true);
      }
  }
  catch
  {
      // In case of any connection exception, the user is not an admin
      return (false);
  }

This fails 401, falling into the catch block.

@oliver-tbs appreciate it's been a while so no worries if not, but did you ever manage to resolve this and do you recall how?

[JakeStanger]

I've raised #1024

[oliver-tbs]

Hi Jake,

Thanks for the additional information! We solved the issue by calling the JoinHubSite api.

Where the following objects are given:

ClientContext ctx
string hubSiteId

var pnpclient = PnPHttpClient.Instance.GetHttpClient(ctx);
HttpRequestMessage request = new HttpRequestMessage(HttpMethod.Post, $"{ctx.Url}/_api/site/JoinHubSite('{hubSiteId}')")
{
    Content = null
};
request.Headers.Add("accept", "application/json;odata.metadata=none");
request.Headers.Add("odata-version", "4.0");

await PnPHttpClient.AuthenticateRequestAsync(request, ctx).ConfigureAwait(false);

HttpResponseMessage response = await pnpclient.SendAsync(request, new CancellationToken());