Add troubleshooting documentation for Audit Logs Office 365 Management API configuration errors

[Copilot]

The Admin | Audit Logs | Office 365 Management API Subscription flow fails with "Get_Azure_Secret - Value cannot be null" when environment variables are not configured. In managed solutions, these variables are read-only unless set during import or via the Setup Wizard.

Changes

Documentation Structure

• docs/coe-knowledge/TROUBLESHOOT-AuditLogs-Office365ManagementAPI.md — Comprehensive guide covering the null secret error with three resolution paths: Setup Wizard (recommended), solution re-import, or manual configuration (unmanaged only)
• docs/coe-knowledge/COE-Kit-Common-GitHub-Responses.md — Response templates for common issues: environment variables, audit logs, BYODL deprecation, pagination/licensing, inventory flows, setup wizard
• docs/coe-knowledge/ISSUE-RESPONSE-AuditLogs-GetAzureSecret-Null.md — Quick reference for the specific error
• docs/coe-knowledge/README.md — Knowledge base index and contribution guidelines
• TROUBLESHOOTING.md — Repository-level hub linking to knowledge base articles
• README.md — Added link to troubleshooting section

Resolution Path

Users need Azure AD app credentials (admin_auditlogsclientid, admin_auditlogsclientsecret or admin_auditlogsclientazuresecret, admin_TenantID). The Setup & Upgrade Wizard provides the correct configuration path for managed solutions where direct environment variable editing is locked.

Key Clarifications

• Client secret requires the actual VALUE (generated string), not the secret name or ID
• Managed solutions must use the Setup Wizard or be re-imported with environment variables
• Flow supports either plain text secret or Azure Key Vault reference

Total: 941 lines across 6 files

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[CoE Starter Kit - BUG] Admin | Audit Logs | Office 365 Management API Subscription Flow Fails</issue_title>
<issue_description>### Does this bug already exist in our backlog?

• I have checked and confirm this is a new bug.

Describe the issue

The Admin | Audit Logs | Office 365 Management API Subscription Flow Fails on Action 'Get_Azure_Secret' failed. Error occured while reading secret: Value cannot be null. Parameter name: input

Expected Behavior

Flow should complete successfully.

What solution are you experiencing the issue with?

Core

What solution version are you using?

4.50.6

What app or flow are you having the issue with?

Admin | Audit Logs | Office 365 Management API Subscription

What method are you using to get inventory and telemetry?

Cloud flows

Steps To Reproduce

1. In the CoE - Governance environment
2. Turned on the Admin | Audit Logs | Office 365 Management API Subscription flow and it shows failed.

Anything else?

No response</issue_description>

<agent_instructions>Analyze why the ‘Admin | Audit Logs | Office 365 Management API Subscription’ flow is failing with the ‘Get_Azure_Secret – value cannot be null’ error, and identify how to update the required environment variable secrets when the Current Value fields are locked in a managed solution; also provide troubleshooting steps to resolve the issue.</agent_instructions>

Comments on the Issue (you are @copilot in this section)

@harini-2-y Hi @david-haver02862 , The flow fails because the Office 365 Management API client secret is not configured, so the Get_Azure_Secret action receives a null value.

Steps to Fix:

1. Create or use an Azure AD app:
   Copy the Client ID and Tenant ID
   Create a Client Secret

2. Configure these environment variables
   admin_auditlogsclientid → Client ID
   One of the following:
   admin_auditlogsclientsecret → Client Secret
   OR
   admin_auditlogsclientazuresecret → Azure Key Vault secret reference
   admin_TenantID → Tenant ID

3. Save the values and rerun the flow
   Open Admin | Audit Logs | Office 365 Management API Subscription
   Run the flow .</comment_new>
   <comment_new>@harini-2-y
   Hi @david-haver02862 ,
   Thank you for your question. Please find the steps below to update the required values and clarify which information should be entered for the client secret.

4. How to update the values:
   Go to the Power Platform Admin Center
   Select your CoE – Governance environment
   Open Solutions
   Open Center of Excellence – Core Components
   Select Environment variables
   Open the required variable, enter the Current Value, and click Save

5. What to enter for admin_auditlogsclientsecret:
   For admin_auditlogsclientsecret, please enter the Client Secret VALUE, not the secret name or ID.</comment_new>
   <comment_new>@harini-2-y
   Hi @david-haver02862 ,
   Thank you for your patience.

In a managed CoE installation, environment variable values must be configured using the CoE Setup & Upgrade Wizard. Please follow the steps below to verify or configure the Audit Logs settings.

Step 1: Open the CoE Setup & Upgrade Wizard
Go to Solutions
Open Center of Excellence – Core Components
Launch the CoE Setup & Upgrade Wizard (model‑driven app)

Step 2: Configure Audit Logs settings
In the wizard, navigate to the Inventory / Audit Logs configuration section
Provide the following values when prompted:
Audit Logs – Client ID → Application (Client) ID
Audit Logs – Client Secret → Client Secret VALUE (not the secret name or ID)
Tenant ID → Azure Directory (Tenant) ID
These values correspond to the following environment variables:
admin_auditlogsclientid
admin_auditlogsclientsecret (or admin_auditlogsclientazuresecret)
admin_TenantID

Step 3: Save and complete the wizard
Click Save / Next to persist the values
Complete the wizard

Step 4: Verify and run the flow
Turn on (if not already enabled) the flow Admin | Audit Logs | Office 365 Management API Subscription
Run the flow to verify it completes successfully.

If you have already completed the CoE Setup Wizard and the environment variable values still appear read‑only, this indicates that the values were not initialized during the original installation. In a managed solution, such values cannot be edited afterward.
To resolve this, please:
Re‑import the Center of Excellence – Core Components solution
During the solution import, when prompted for environment variables, provide:

Client ID
Client Secret VALUE
Tenant ID
Complete the import
Rerun the CoE Setup & Upgrade Wizard for verification
Run the Admin | Audit Logs | Office 365 Management API Subscription flow again</comment_new>
<comment_new>@harini-2-y
Hi @david-haver02862,
Thank you for the clarification.

The CoE Starter Kit is installed as a managed solution.
If the Audit Logs enviro...

Custom agent used: CoE Custom Agent
Specialized agent for triaging and fixing issues in the CoE Starter Kit. Always consult the official CoE docs and the team’s SharePoint notes first, then mine prior GitHub issues and the CoE Common Responses playbook.

• Fixes [CoE Starter Kit - BUG] Admin | Audit Logs | Office 365 Management API Subscription Flow Fails #10644

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.