Enable and view Azure API Center portal view - VS Code extension

This article shows how to provide enterprise developers access to the Azure API Center portal view in the Visual Studio Code extension for Azure API Center. Using the portal view, developers can discover APIs in your Azure API center, view API definitions, and optionally generate API clients when they don't have access to manage the API center itself or add APIs to the inventory. Access to the API Center portal view is managed using Microsoft Entra ID and Azure role-based access control.

Prerequisites

• An API center in your Azure subscription. If you haven't created one already, see Quickstart: Create your API center.

• Permissions to create an app registration in a Microsoft Entra tenant associated with your Azure subscription, and permissions to grant access to data in your API center.

For app developers

• Azure API Center extension for Visual Studio Code

The following Visual Studio Code extension is optional:

• Microsoft Kiota extension - to generate API clients

Steps for API center administrators to enable access to API Center portal view

The following sections provide steps for API center administrators to enable enterprise developers to access the API Center portal view.

Create Microsoft Entra app registration

First configure an app registration in your Microsoft Entra ID tenant. The app registration enables the API Center portal to access data from your API center on behalf of a signed-in user.

1. In the Azure portal, navigate to Microsoft Entra ID > App registrations.

2. Select + New registration.

3. On the Register an application page, set the values as follows:

   1. Set Name to a meaningful name such as api-center-portal
   2. Under Supported account types, select Accounts in this organizational directory (Single tenant).
   3. In Redirect URI, select Single-page application (SPA) and set the URI. Enter the URI of your API Center portal deployment, in the following form: https://<service-name>.portal.<location>.azure-api-center.ms. Replace <service name> and <location> with the name of your API center and the location where it's deployed, Example: https://myapicenter.portal.eastus.azure-api-center.ms.
   4. Select Register.

When enabling the API Center portal in the Visual Studio Code extension for API Center, also configure the following redirect URIs.

1. On the Manage > Authentication page, Select Add a platform and select Mobile and desktop applications.

2. Configure the following three custom redirect URIs:
   https://vscode.dev/redirect
http://localhost
ms-appx-web://Microsoft.AAD.BrokerPlugin/<application-client-id>
   

   Replace <application-client-id> with the application (client) ID of this app. You can find this value on the Overview page.

Enable sign-in to API Center portal view by Microsoft Entra users and groups

Enterprise developers must sign in with a Microsoft account to see the API Center portal view for your API center. If needed, add or invite developers to your Microsoft Entra tenant.

To enable sign-in, assign the Azure API Center Data Reader role to users or groups in your organization, scoped to your API center.

For detailed prerequisites and steps to assign a role to users and groups, see Assign Azure roles using the Azure portal. Brief steps follow:

1. In the Azure portal, navigate to your API center.
2. In the left menu, select Access control (IAM) > + Add role assignment.
3. In the Add role assignment pane, set the values as follows:
   1. On the Role page, search for and select Azure API Center Data Reader. Select Next.
   2. On the Members page, In Assign access to, select User, group, or service principal > + Select members.
   3. On the Select members page, search for and select the users or groups to assign the role to. Click Select and then Next.
   4. Review the role assignment, and select Review + assign.

After you configure access to the portal, configured users can sign in to the portal and view the APIs in your API center.

Steps for enterprise developers to access the API Center portal view

Developers can follow these steps to connect and sign in to view an API Center portal view using the Visual Studio Code extension. Settings to connect to the API center need to be provided by the API center administrator.

Connect to an API center

1. Install the pre-release version of the Azure API Center extension for Visual Studio Code for Visual Studio Code.

2. In Visual Studio Code, in the Activity Bar on the left, select API Center.

   

3. Use the Ctrl+Shift+P keyboard shortcut to open the Command Palette. Type Azure API Center: Connect to an API Center and hit Enter.

4. Answer the prompts to input the following information:

   1. The runtime URL of your API center, in the format <service name>.data.<region>.azure-apicenter.ms (don't prefix with https://). Example: contoso-apic.data.eastus.azure-apicenter.ms. This runtime URL appears on the Overview page of the API center in the Azure portal view.

   2. The application (client) ID from the app registration configured by the administrator in the previous section.

   3. The directory (tenant) ID from the app registration configured by the administrator in the previous section.

   Tip

   An API center administrator needs to provide these connection details to developers, or provide a direct link in the following format:
   vscode://apidev.azure-api-center?clientId=<Client ID>&tenantId=<tenant ID>&runtimeUrl=<service-name>.data.<region>.azure-apicenter.ms

   After you connect to the API center, the name of the API center appears in the API Center portal view.

5. To view the APIs in the API center, under the API center name, select Sign in to Azure. Sign-in is allowed with a Microsoft account that is assigned the Azure API Center Data Reader role in the API center.

   

6. After signing in, select APIs to list the APIs in the API center. Expand an API to explore its versions and definitions.

   

7. Repeat the preceding steps to connect to more API centers, if access is configured.

Discover and consume APIs in the API Center portal view

The API Center portal view helps enterprise developers discover API details and start API client development. Developers can access the following features by right-clicking on an API definition in the API Center portal view:

• Export API specification document - Export an API specification from a definition and then download it as a file
• Generate API client - Use the Microsoft Kiota extension to generate an API client for their favorite language
• Generate Markdown - Generate API documentation in Markdown format
• OpenAPI documentation - View the documentation for an API definition and try operations in a Swagger UI (only available for OpenAPI definitions)

Troubleshooting

Unable to sign in to Azure

If users who have been assigned the Azure API Center Data Reader role can't complete the sign-in flow after selecting Sign in to Azure in the API Center portal view, there might be a problem with the configuration of the connection.

Check the settings in the app registration you configured in Microsoft Entra ID. Confirm the values of the application (client) ID and the directory (tenant) ID in the app registration and the runtime URL of the API center. Then, set up the connection to the API center again.

Related content

• Build and register APIs with the Azure API Center extension for Visual Studio Code

• Best practices for Azure RBAC

• Register a resource provider