Forum Discussion
Gateway cluster API call error
Hi BindiyaThota ,
A 401 Unauthorized error when calling the Power BI Gateway Cluster Admin API through a service principal usually indicates a configuration issue in either Azure AD or the Power BI Admin Portal. Remove any admin-consent-required AAD app permissions from the app registration and then request a new token. Ensure service principal access is enabled in Power BI tenant settings.
In Power BI Admin Portal > Tenant Settings > Developer Settings:
Allow service principals to use Power BI APIs
Allow service principals to access admin APIs
If these settings are restricted to specific security groups, make sure your service principal is included.
Try to add the service principal itself as a Gateway Cluster Admin in Power BI > Manage Gateways.
Hope this helps.
Thank you.
Hi BindiyaThota
Check that the service principal is directly assigned as a gateway cluster admin not just through a group assignment because some admin API endpoints require direct assignment. Also, verify that no admin-consent-required API permissions (like Dataset.ReadWrite.All or Tenant.Read.All) are enabled on your app registration, service principal authentication for admin APIs can fail with 401 if these permissions are present. Remove those permissions, refresh your token and try the call again
🌟 I hope this solution helps you unlock your Power BI potential! If you found it helpful, click 'Mark as Solution' to guide others toward the answers they need.
💡 Love the effort? Drop the kudos! Your appreciation fuels community spirit and innovation.
🎖 As a proud SuperUser and Microsoft Partner, we’re here to empower your data journey and the Power BI Community at large.
🔗 Curious to explore more? [Discover here].
Let’s keep building smarter solutions together!
Thank you for the suggestion, grazitti_sapna .
I tried adding service principal as admin directly to the gateway cluster. But it did not help.
In the API permissions, I see permission (type=application) for "Tenant.Read.All" with admin consent to "Yes". Should this be changed to "No"?