topic Re: Bearer generated on docs.microsoft.com works while oauth2 doesn't in Developer

Bearer generated on docs.microsoft.com works while oauth2 doesn't

pawels — Mon, 24 Feb 2020 08:27:49 GMT

Good day all,

I'm struggling for a while with generating Bearer for PBI REST API. Action that I'd like to make is to trigger truncating streaming data:

https://docs.microsoft.com/en-us/rest/api/power-bi/pushdatasets/datasets_deleterowsingroup

In order to do so I need to send DELETE message covered with bearer. When I'm using bearer generated in Try it section I've 200 OK answer - as expected.

I've registered app on dev.powerbi.com/apps for client id and secret with required scope Dataset.ReadWrite.All in order to generate bearer:

string resourceUri = "https://analysis.windows.net/powerbi/api";

string authorityUri = "https://login.windows.net/common/oauth2";

AuthenticationContext authContext = new AuthenticationContext(authorityUri);
string token = authContext.AcquireToken(resourceUri, new ClientCredential(clientID, clientSecret)).AccessToken;

Code above works and returns bearer, but once using it I've 401 UNAUTHORIZED.

Question is: why bearer generated on Try it section (so on my credentials) works while bearer generated on app registration doesn't?

Re: Bearer generated on docs.microsoft.com works while oauth2 doesn't

jppp — Mon, 24 Feb 2020 09:08:30 GMT

Hi @pawels ,

One thing that pops my mind: does your application (=clientID) has access to the workgroup/dataset?

The 'try it' option is using your account to impersonate you to connect to the REST API and the code sample you share is using a ClinetID/Secret scheme to authenticate.

-JP

Re: Bearer generated on docs.microsoft.com works while oauth2 doesn't

pawels — Mon, 24 Feb 2020 09:49:47 GMT

Hey @jppp !

Thank you for reply. Could you please evaluate how to check that access or eventually how to add this access to?

Cheers!
PS

Re: Bearer generated on docs.microsoft.com works while oauth2 doesn't

jppp — Mon, 24 Feb 2020 10:04:27 GMT

Hi @pawels

The SP should have been added to the 'users' that have access to the workspace, see step 5 of https://docs.microsoft.com/en-us/power-bi/developer/embed-service-principal#get-started-with-a-service-principal

-JP