Forum Discussion

CorradoPag's avatar
CorradoPag
Frequent Visitor
4 years ago
Solved

Error 'API is not accessible for application' when I run API GetAppUsersAsAdmin on Postman

Hi, I'm trying to run the GetAppUsersAsAdmin API on Postman.
I registered an app giving the authorization "Tenant.Read.All", but in the status appears the message: "not granted for ...", in the column "Admin consent required" has the value "No".
I get the application token from "://login.microsoftonline.com/tenant_id/oauth2/v2.0/token" with the user who has the roles: "Administrator Power Platform" and "Administrator of Power BI"
When I launch GET "://api.powerbi.com/v1.0/myorg/admin/apps/app_Id/users" from Postman I get the error "API is not accessible for application"
Can someone help me? Thank you. 

  • I solved it, I enabled the option "Allow service principals to use read-only admin APIs" in the menu Settings -> Admin Portal

     

8 Replies

  • CorradoPag's avatar
    CorradoPag
    Frequent Visitor

    I solved it, I enabled the option "Allow service principals to use read-only admin APIs" in the menu Settings -> Admin Portal

     

  • Anonymous's avatar
    Anonymous
    Not applicable

    Hi CorradoPag ,

    Whether your problem has been resolved? If yes, could you please mark the helpful post as Answered? It will help the others in the community find the solution easily if they face the same problem as yours. Thank you.

    Otherwise,  you can follow the below steps to get it. 

    1. Sign in Power BI Service with Power BI Admin account

    2. Click "F12" and navigate to "Network" tab to get the token

    3. Call the REST API GetAppUsersAsAdmin by Postman

    Best Regards

  • Anonymous's avatar
    Anonymous
    Not applicable

    Hi CorradoPag ,

    According to your description, it seems that the permission and scope are OK (Power BI Admin and has Tenant.Read.All permissions). Could you please tell me how you get the value of the parameter {appId} mentioned there? Can you provide a screenshot of the steps involved? Thank you.

    Also, please check the documentation below, I hope it will help you to solve the problem.

    Power BI - On Cloud

    Important:  Make sure there are no Power BI admin-consent-required permissions set on this application. For more information, see Managing consent to applications and evaluating consent requests.


    Grant tenant-wide admin consent to an application

    Best Regards

  • CorradoPag's avatar
    CorradoPag
    Frequent Visitor

    Hi Anonymous , thanks for the support. I still have the problem

    In Postman I get the relative token

     

    and I use the token in the API PBI call, the appID I get it from the Power BI app URL, this URL is an example.

     

     

    The two APIs need the admin grant, maybe that's the problem?

     

    There are no Power BI admin-consent-required permissions set on this application

    • Anonymous's avatar
      Anonymous
      Not applicable

      Hi CorradoPag ,

      Yes, exactly. From the screenshot you provided, it looks like the required scope (Tenant.Read.All or Tenant.ReadWrite.Allto run that Admin REST API is not being met.

      You can try to see if the desired result is returned after giving the appropriate permissions by referring to the documentation below.

      Modifying Permissions of an Existing App Registration

      Best Regards

    • Anonymous's avatar
      Anonymous
      Not applicable

      Hi CorradoPag  ,

      Whether your problem has been resolved? If yes, could you please mark the helpful post as Answered? It will help the others in the community find the solution easily if they face the same problem as yours. Thank you.

      Best Regards

      • CorradoPag's avatar
        CorradoPag
        Frequent Visitor

        Hi Anonymous, they gave me the rights for the two scopes

         

         

        but the error still appears