topic Re: Set Service Principal s Dataset Owner in Developer

Set Service Principal s Dataset Owner

dom99 — Tue, 12 Nov 2019 15:57:18 GMT

Hi,

I wonder if someone can help me. I need to set an existing dataset to be owned by a service principal but cant seem to manage it.

the two options I can see are:

1. Manually set it - cant do this because setting manually assigns the dataset ownership as the logged in user, but you cant log in to the service as a service principal

2. use the powershell API - same problem here, there doesnt seem to be an option to set who owns it, it just picks up the logged in user and I dont know how to log in via the API as a service principal. Found a take over script example here https://github.com/Azure-Samples/powerbi-powershell/blob/master/takeover-dataset.ps1

Does anyone know how I can do this?

Thanks

Re: Set Service Principal s Dataset Owner

Jayendran — Wed, 13 Nov 2019 09:19:42 GMT

Hi @dom99 ,

Using powershell it is possible

I already created the entier script and published here

https://gallery.technet.microsoft.com/AzureDevOps-CICD-for-fefd58b8

The powershell scripts looks like

$applicationId = "" $clientsec = "" | ConvertTo-SecureString -AsPlainText -Force # $credential = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $applicationId, $clientsec Connect-PowerBIServiceAccount -ServicePrincipal -Credential $credential -TenantId "" $workspacename="PowerBI_CICD_PROD" $datasetname="AdventureReports" ##Getworksapce $workspace =Get-PowerBIWorkspace -Name $workspacename # GetDataSets $DatasetResponse=Invoke-PowerBIRestMethod -Url "groups/$($workspace.id)/datasets" -Method Get | ConvertFrom-Json # Get DataSet $datasets = $DatasetResponse.value foreach($dataset in $datasets){ if($dataset.name -eq $datasetname){ $datasetid= $dataset.id; break; } } ## Take Over DataSet Invoke-PowerBIRestMethod -Url "groups/$($workspace.id)/datasets/$($datasetid)/Default.TakeOver" -Method Post

Re: Set Service Principal s Dataset Owner

dom99 — Wed, 13 Nov 2019 09:40:08 GMT

@Jayendran Hi, thanks for the response.

Great thank you thats exactly what I needed. I will try it out shortly 🙂

Re: Set Service Principal s Dataset Owner

dom99 — Wed, 13 Nov 2019 11:51:41 GMT

Hi @Jayendran

I've tried your script but unfortunatly the method below fails.

Invoke-PowerBIRestMethod

I successfully log in as the service principal and assign the values as required, the script works up until the very end.

The error message is:

Invoke-PowerBIRestMethod : One or more errors occurred.
At line:3 char:1
+ Invoke-PowerBIRestMethod -Url "groups/$($workspace.id)/datasets/$($da ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : WriteError: (Microsoft.Power...werBIRestMethod:InvokePowerBIRestMethod) [Invoke-PowerBIR
estMethod], AggregateException
+ FullyQualifiedErrorId : One or more errors occurred.,Microsoft.PowerBI.Commands.Profile.InvokePowerBIRestMethod

Can you help with finding out why its not working? I found your powershell scripts you'd uploaded, very handy to have thank you.

Re: Set Service Principal s Dataset Owner

Jayendran — Wed, 13 Nov 2019 12:08:47 GMT

Hi @dom99 ,

Make sure that SPN have admin access to your Workspace.
Make sure the workspace id ,datasetid are properly passing to the script

After you got the error run the below script

Resolve-PowerBIError

Which will gives you the exact error

Re: Set Service Principal s Dataset Owner

dom99 — Wed, 13 Nov 2019 14:34:29 GMT

Hi @Jayendran

I read the documentation and turns out the -Body parameter (sometimes called the content) is now required for POST operations.

so the invoke method looks like:

Invoke-PowerBIRestMethod -Url "groups/$($workspace.id)/datasets/$($datasetid)/Default.TakeOver" -Method Post -Body ""

thanks for your help 🙂

Re: Set Service Principal s Dataset Owner

tackytechtom — Sun, 16 Apr 2023 19:40:02 GMT

Hiya!

Although I am pretty late to this party here, I still wanted to distribute two blog posts that are very much related to this topic. So, in case someone finds him/herself in the situation where a service principal needs to own the power bi dataset, I hope you find any of the following helpful.

Blog Post A:

https://www.tackytech.blog/how-to-make-a-service-principal-the-owner-of-a-power-bi-dataset/

A walkthrough on how to take over a dataset by a service principal via an Azure DevOps pipeline. Likewise to the accepted answer in this thread here, the core is also a Powershell script that can be used outside an Azure DevOps pipeline as well.

Blog Post B:

https://www.tackytech.blog/how-to-retrieve-oauth2-access-tokens-for-data-sources-via-data-factory-to-refresh-power-bi-dataset/

An ETL flow in Azure Data Factory where the data factory is responsible for updating the oauth2 token for all data sources in the power bi dataset prior to kickstarting the dataset refresh (via managed identity). Here, a prerequesite is that the dataset is owned by a service principal.

Once again, I hope this is helping! 🙂

/Tom
https://www.tackytech.blog/
https://www.instagram.com/tackytechtom/