Power BI API authorization issue through Office 365 group

bwang1 — Fri, 11 Aug 2023 15:44:25 GMT

We have a .NET Core application that embeds reports to web pages using the "User Owns Data" model. We assigned an Office 365 group as "Viewer" of the Workspace, but users of that group are getting 401 Unauthorized error when calling the GetReportInGroupAsync method. I assume users should get the "Viewer" permission through the group. How can we solve this problem? Thank you!

Re: Power BI API authorization issue through Office 365 group

Anonymous — Wed, 16 Aug 2023 08:55:23 GMT

Hi bwang1 ,

According to the error message, it seems that the "group" making the API call may not have sufficient privileges to access the reports. Make sure that the "group" has been granted the appropriate permissions in Azure AD and Power BI. I found the following thread which has the similar problem as yours, hope it can help you solve the problem.

c# - Unauthorized response on GetReportInGroupAsync PowerBI Embedded API call using Service Principal - Stack Overflow

For Service Principal to work for any embedding, you need to enable Service Principal option in Power BI Admin portal and then, add it to the Power BI workspace.

Please check the following once:

Check if service principal is enabled under Admin portal in Power BI service. Follow step 3 onwards

If things don't work for you after following the above step, try embedding with the developer sample

Besides, based on your code it looks like you are using ADAL library for authentication. Microsoft recommends to use MSAL library for authentication with Azure AD entities.
Also, you can use certificate instead of app secret for service principal authentication. (Docs)

Best Regards

topic Power BI API authorization issue through Office 365 group in Developer

Power BI API authorization issue through Office 365 group

Re: Power BI API authorization issue through Office 365 group