401 unauthorised when calling API client.Group.GetGroups()

karl-LT — Wed, 19 Sep 2018 07:18:14 GMT

We are embedding a report in a website using the "User Owns Data" method as described here https://github.com/Microsoft/PowerBI-Developer-Samples/tree/master/User%20Owns%20Data.
When we attempt to access the report using a AD guest user, we get a 401 unauthorised exception when calling the client.Groups.GetGroups() API call.

Background:

This embedded report is successfully working when we log in as the user who published the report and owns the workspace.
We have added the guest user to the organisations active directory via invite guest
the guest user is from an external azure AD and is not using a social account.
This guest user has been allocated a PowerBI Pro license as outlined in https://docs.microsoft.com/en-us/power-bi/service-admin-azure-ad-b2b
The guest user has had the report shared with them.
The dataset has been set up with Row Level Security which has been configured for the guest user.
The guest user can access the report by using the link for that report (from the share screen) i.e. "https://app.powerbi.com/groups/me/reports/[Report Guid]?ctid=[Guid ????]"
The guest user can not access it from the "WebURL" of the API GetReport response i.e. "https://app.powerbi.com/reports/[report guid]"
We have attempted to just get the report (in case it was listing groups that was the cause) but client.Reports.GetReportInGroup(groupId, reportId) also causes a 401.
Authenication for all users is via https://login.windows.net/common/oauth2/authorize/
We have checked permissions for the registered app and have granted everything but the ones marked "requires admin"

At this point I'm not sure if this is a bug or I've missed something or we are trying to do something that is unsupported, any assistance would be greatly appreciated.

Regards,

Karl

Re: 401 unauthorised when calling API client.Group.GetGroups()

Mbalcarek — Fri, 09 Jul 2021 18:03:18 GMT

Karl,

Did you solve this? I have the same issue.

Re: 401 unauthorised when calling API client.Group.GetGroups()

karl-LT — Sat, 10 Jul 2021 09:15:54 GMT

Unfortunately no. We ended up changing directions shortly after this was raised and decided not to embeded the reports.

topic Re: 401 unauthorised when calling API client.Group.GetGroups() in Developer

401 unauthorised when calling API client.Group.GetGroups()

Re: 401 unauthorised when calling API client.Group.GetGroups()

Re: 401 unauthorised when calling API client.Group.GetGroups()