topic Re: Access to Scanner APIs in Developer

Access to Scanner APIs

rjhale — Wed, 20 Oct 2021 20:13:40 GMT

Is it possible to use the new Scanner API endpoints without being a full Global or Power BI admin?

I work in a large organization and manage around 25 workspaces with a lot of dataflows and datasets/reports, but I'm not a Power BI or Glabl Admin in the tenant. I'm using the other API endpoints in our environment successfully, so I would like to know if it's even possible for me to use the new Scanner APIs before putting in the request to our Cloud Services Team.

Thanks.

Re: Access to Scanner APIs

Anonymous — Mon, 25 Oct 2021 06:24:32 GMT

Hi @rjhale ,

Please review the content in the following blog and check whether Service Principal authentication for read-only scanner Admin APIs is what you want.

Announcing new Admin APIs and Service Principal authentication to make for better tenant metadata scanning

To better support the security constraints of some organizations, we added service principal support for the scanner Admin APIs. Service principal is an authentication method that can be used to let an Azure AD application access Power BI APIs. With this authentication method, you no longer have to maintain a service account with an admin role. Rather, to allow your app to use the Admin APIs, you just have to give your approval once as part of the tenant settings configuration.

Best Regards

Re: Access to Scanner APIs

rjhale — Wed, 27 Oct 2021 20:20:37 GMT

Ok. I worked with our global admins to get a service principal created, and I was able to call the new scanner APIs with that service principal. It seems to allow me to get the metadata and scan results for just the workspaces that I grant it access to.

Thanks.