Forum Discussion
Service principal issuing dodelete generates 403
Hello, Sheng,
First of all thank you for your reply.
Indeed I did it :
At least, can you confirm that what I m doing is "expected" to work ?
My point is that I could stay with user / pwd credential for my application authorization, but I m afraid that at some point, there would be some 2FA actions (mail, sms ...) enforced by Azure that we can't cope with the application which is server side with no human interaction.
HI Anonymous,
According to your description, it seems like you are worried about the abuse of 'service principal' verifications, right?
If that is the case, I think you can take a look at the limitations that the official document mentions.
#1, This credential only works for some REST APIs, it not globally available to all power bi service. (normally power bi service and datasets does not work for 'service principal' credential)
#2, This credentials usage ranges based on configure in tenant settings and permissions. You can configure the minimum version of permission and limit the usage to some special group members.
#3, As I said above, its usage has been limited to the specified API and contents. its permissions not able to affect or usage on other MFA actions.
Reference links:
BTW, if you still need some additional permission or management of this feature usage, you can consider submitting ideas to help improve this feature.
Regards,
Xiaoxin Sheng