Forum Discussion

Merry's avatar
Merry
Regular Visitor
4 years ago
Solved

Operation returned an invalid status code 'Forbidden' when retrieving embed GenerateTokenAsync

Hi everyone,

 

Our reports in power bi embedded stopped working . It has been working and all of a sudden it give us the Forbidden status.

We are using service principal model. 

 

We I debug the code Power Bi Client if successful instantiated, I can even get the list of my respots in workspace how ever when it reaches to return await PowerBiClient.EmbedToken.GenerateTokenAsync(tokenRequest) it fails.

We checked the Audit log on Power Bi but we could not find anything valuable on there.

 

 

We have a Power BI Premuim  Licence and dedicated Capacity.

 

 

Any advice would be much apprecaited!

 

Thanks,

 

Maryam

 

 

 

 

 

 

Need Help
  • Merry's avatar
    Merry
    4 years ago

    Thank you for the information . It turned out that embedding Power BI reports on the tenant was disabled wrongly, 

  • Merry's avatar
    Merry
    4 years ago

    Thank you s o much! We found the issue. For some reason in Admin center under Tenant --> Developer  Setting --> Embed contenet in apps had been removed. Once we specified the security group the issue is resolved.

     

    Thanks,

     

    Maryam

5 Replies

  • Anonymous's avatar
    Anonymous
    Not applicable
    4 years ago

    Hi Merry ,

     

     

    how ever when it reaches to return await PowerBiClient.EmbedToken.GenerateTokenAsync(tokenRequest) it fails.

     

    I think there should be something wrong in generate embed token. As far as I know, your service prinicpal will generate access token and then generate embed token to your customers. 

    You may refer to this offical blog to learn more details about the workflow.

    For refernece:

    Authentication flows

    Generate an embed token

    I suggest you to have a test to generate access token and then generate embed token by bear token(access token) in Postman by Rest API.

    Using Postman, we use below POST REST API with body information to get the Bearer Token

    To use this, we will need to configure the Body as below,

    Then generate embed token in Postman.

    Embed Token - Generate Token

     

    Best Regards,
    Rico Zhou

     

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

     

                 

    • Merry's avatar
      Merry
      Regular Visitor
      4 years ago

      Thank you s o much! We found the issue. For some reason in Admin center under Tenant --> Developer  Setting --> Embed contenet in apps had been removed. Once we specified the security group the issue is resolved.

       

      Thanks,

       

      Maryam

  • Merry's avatar
    Merry
    Regular Visitor
    4 years ago

    Thank you for the information . It turned out that embedding Power BI reports on the tenant was disabled wrongly, 

    • Anonymous's avatar
      Anonymous
      Not applicable
      4 years ago

      I have exact same issue also have dedicated embed capacity and still getting 403 to acquire Embed Token

  • Ruchita's avatar
    Ruchita
    Helper I
    2 years ago

    I was also facing the same issue. All the API permissions were correct and it was getting hard to find the problem. So I registered a new service principal in Azure and did not configure any permissions for the service principal. And embedded the new IDs in my web app, the error got resolved. It seems there were some issue in the previous service principal.