Forum Discussion

toresenneseth's avatar
toresenneseth
Frequent Visitor
1 year ago
Solved

Call Fabric User Data Function from a custom visual

Hi all,   Does anyone know how to call a Fabric User Data Function from a custom visual?   When I make the call, I get a 403 Forbidden response. The docs says that it's because the payload is too...
Need Help
  • v-echaithra's avatar
    v-echaithra
    1 year ago

    Hi toresenneseth ,

    If it's not "https://analysis.windows.net/powerbi/api", then Power BI services will reject it with 403 or 401 errors.

    Since your custom visual is using the Power BI Authentication API, the access token it retrieves is scoped based on the AADAuthentication privilage. However, the token does not include the required audience (https://analysis.windows.net/powerbi/api), which is likely causing the 403 error when attempting to invoke the UDF.

    Power BI custom visuals may not yet fully support authenticated calls to Fabric UDFs, meaning this scenario might not be officially supported at the moment.


    The permission GraphQLApi.Execute.All is Application-level. However, Power BI service does not yet fully support GraphQL through service principals in all contexts, especially from within custom visuals.

    Additionally, even if the SP has the GraphQL permission, it must also have access to the workspace and semantic model associated with the UDF.
    The token is recognized but authorization fails typically because:

    1) The SP doesn’t have access to the workspace/data model.
    2) The custom visual isn’t authorized to invoke UDFs.
    3) The API being called isn't exposed to SPs in that context.

     

    If this helped, please mark the response as the accepted solution and give it a thumbs-up so others can benefit too.

    Best regards,
    Chaithra E.

v-echaithra's avatar
v-echaithra
Community Support
1 year ago

Hi toresenneseth ,

As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?
If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

 

Regards,
Chaithra.

toresenneseth's avatar
toresenneseth
Frequent Visitor
1 year ago

Hi,

I'm able to call the UDF if I run it from a console app, for example like shown here: https://learn.microsoft.com/en-us/fabric/data-engineering/user-data-functions/tutorial-invoke-from-python-app

 

However, I'm not able to call the API from our custom visual, so I'm simply trying to understand if this scenario is supported or not yet. FYI: Our custom visual is in AppSource, and currently using the Power BI Authentiaction API to get access tokens for the logged in user.

 

When I call the Power BI Authentiation API, the access token I get back does not have the following audience: 

https://analysis.windows.net/powerbi/api

Rather, it has the audience as specified by the AADAuthentication privilige in the capabilities.json file. This is expected, but I guess this also is the problem. It is however, not something we're in control of, as this is what the custom visuals spec says we have to do to get the Auth API working. 

If I simply hard code the access token returned to the console app into the custom visual, I'm able to invoke the UDF (I know it's not a viable solution).

 

I also tried granting the custom visual Service Princial permissions to https://analysis.windows.net/powerbi/api/GraphQLApi.Execute.All, but it had no effect (still got a 403) 


So what I'm trying to understand is if calling Fabric UDFs from a custom visual is supposed to work (and I have poor skills), or if it's still too early - which is also fine for now, as I'm simply exploring the possibilities.