Get Activity Events API - PowerBINotAuthorizedException Error

Question

Hi all,I'm trying to get the report usage data out of the org's Power BI environment, but I keep running into this error: "PowerBINotAuthorizedException"In order to facilitate this I have registered an app in Entra ID, which has been granted "Tenant.Read.All" privileges for Power BI. I have added the app to a security group, and the security group has been enabled to acces Read-Only APIs in Power BI. The user account running the flow has also been added to the security group for good measure.I have tried in Power Automate and Postman, first generating a token, then trying to query the PBI API with said token, I get the same error in both cases.&nbsp;Here's the token generation, I am using our Tenant ID in the URI, client ID &amp; secret from the app:I then put that token into the HTTP call, which I have tried with and without parameters (i.e. filtering on username, specific days, either of the above or none of the above).I have also done this without the Get Token step, simply using the authentication in the advanced parameters of the HTTP step, which leads to the same error.I've also additionally tried adding in both the user account that runs the flow and the service principal (app) itself as admins to all the workspaces on Power BI, which made no difference.Has anyone here encountered (&amp; resolved) this issue?The API documentation:https://learn.microsoft.com/en-us/rest/api/power-bi/admin/get-activity-events&nbsp;

v-tejrama · Accepted Answer

Hi&nbsp;&nbsp;JamieHut&nbsp;&nbsp;&nbsp;,Based on your description, it appears that the Entra ID application has been assigned the Power BI Tenant.Read.All application permission. For the Get Activity Events admin API, Microsoft requires that service principal authentication be enabled via the Power BI tenant settings, and that the service principal is included in the designated security group. However, the app registration should not have Power BI admin consent-required permissions like Tenant.Read.All or Tenant.ReadWrite.All. Instead, authorization is managed through the Power BI Admin Portal settings rather than through app registration permissions.Please check if the access token you are generating is a service principal token by decoding the JWT and reviewing the claims. If so, remove Power BI application permissions from the app registration, allow time for the changes to take effect, generate a new token, and retest the API. Additionally, confirm that the service principal is part of the exact security group specified in the Power BI Admin Portal tenant settings.&nbsp;Workspace Admin permissions are not relevant for this endpoint, as Get Activity Events is a tenant-level Admin API.
If you are using delegated user authentication instead of a service principal, ensure the account has the Fabric Administrator or Power BI Service Administrator role as workspace permissions alone are insufficient for this API.
For further information, please review the Microsoft documentation belowGet Activity Events API - PowerBINotAuthorizedExce... - Microsoft Fabric CommunityAdmin - Get Activity Events - REST API (Power BI Power BI REST APIs) | Microsoft LearnAutomate Power BI Premium workspace and semantic model tasks with service principals - Microsoft Fabric | Microsoft LearnOAuth 2.0 client credentials flow on the Microsoft identity platform - Microsoft identity platform | Microsoft LearnAdmin API admin settings - Microsoft Fabric | Microsoft LearnThank you.

Forum Discussion

Get Activity Events API - PowerBINotAuthorizedException Error

2 Replies

Related content

PowerBI Audit Activity events API - Scheduled RefreshDataset activity

Get parameters from Activator event

Data Activator Events in the Audit Logs

Monitor Fabric Workspace activity - Item job event logs

Admin - Get Activity Events - Response code: 400