What causes AADSTS650054?

A required API or service principal has been deleted from the Microsoft Entra ID (Azure AD) tenant. The app manifest still references a resourceAppId (e.g. an old custom API) that no longer exists. Stale API permissions remain in the app registration after a resource was decommissioned. The app was registered in a different tenant than the one the user is signing into (multi-tenant mismatch). A custom-developed API's service principal was removed but consuming apps still request its scopes

How do I fix AADSTS650054?

Open the app registration in Entra admin center → API permissions and identify any permission marked 'Other permissions granted' or showing an unknown/missing resource. Remove permissions that point to deleted or unknown resources, then click 'Grant admin consent' to refresh the consent state. In the app's manifest, inspect requiredResourceAccess and delete entries whose resourceAppId no longer resolves to a service principal in the tenant. If the resource should still exist (e.g. a custom API), re-register its service principal in the current tenant via 'Enterprise applications → New application'. Verify the user is signing in against the correct tenant — for multi-tenant apps, ensure the resource is provisioned in each consuming tenant

Low severityauthentication

Power BI Error:
AADSTS650054

What does this error mean?

The app requested permissions for an API or service principal that no longer exists in the Microsoft Entra ID tenant.

Common causes

1A required API or service principal has been deleted from the Microsoft Entra ID (Azure AD) tenant
2The app manifest still references a resourceAppId (e.g. an old custom API) that no longer exists
3Stale API permissions remain in the app registration after a resource was decommissioned
4The app was registered in a different tenant than the one the user is signing into (multi-tenant mismatch)
5A custom-developed API's service principal was removed but consuming apps still request its scopes

How to fix it

1Open the app registration in Entra admin center → API permissions and identify any permission marked 'Other permissions granted' or showing an unknown/missing resource
2Remove permissions that point to deleted or unknown resources, then click 'Grant admin consent' to refresh the consent state
3In the app's manifest, inspect requiredResourceAccess and delete entries whose resourceAppId no longer resolves to a service principal in the tenant
4If the resource should still exist (e.g. a custom API), re-register its service principal in the current tenant via 'Enterprise applications → New application'
5Verify the user is signing in against the correct tenant — for multi-tenant apps, ensure the resource is provisioned in each consuming tenant

Frequently asked questions

What does AADSTS650054 mean?

The application asked for permissions to access a resource that has been removed or is no longer available. Make sure that all resources the app is calling are present in the tenant you're operating i

How do I fix this error?

Check your application registration, token configuration, and user permissions in the Azure portal. Review Conditional Access policies if the error is policy-related.

Source · learn.microsoft.com/en-us/entra/identity-platform/reference-error-codes#aadsts-error-codes