OAuth2 Dataset Credentails Update after take over fails

alexandruMP — Mon, 01 Nov 2021 11:33:53 GMT

I am trying to take over a dataset that has data in ADX and although the take over is successful, the dataset credentials need to be updated.

*SPN and user have full admin rights on workspace and Adx cluster

I have the following script:

$PWord = ConvertTo-SecureString -String $clientSecret -AsPlainText -Force $Credential = New-Object -TypeName "System.Management.Automation.PSCredential" -ArgumentList $clientId, $PWord Connect-PowerBIServiceAccount -Tenant $Tenant -ServicePrincipal -Credential $Credential ################ Taking over dataset as SPN #################### Invoke-PowerBIRestMethod -Url "groups/$($Workspace)/datasets/$($Dataset)/Default.TakeOver" -Method POST -Body "" #################### "Resetting" Credentials towards datasource of dataset #################### # Apparently we need the id of the "Gateway" that the datasets resides within. If it doesn't have a gateway (if it's a cloud data source for instance) it uses Microsofts "Default" gateway. We need its ID. $BounGateway=Invoke-PowerBIRestMethod -Url "groups/$($Workspace)/datasets/$($Dataset)/Default.GetBoundGatewayDataSources" -Method GET | ConvertFrom-Json $Accesstoken = Get-PowerBiAccessToken $Body = @{ credentialDetails = @{ credentialType = "OAuth2"; credentials = "{`"credentialData`":[{`"name`":`"accessToken`", `"value`":`"$($Accesstoken.Authorization)`"}]}"; encryptedConnection = "Encrypted"; encryptionAlgorithm = "None"; privacyLevel = "None" } } | ConvertTo-Json Write-Output $Body Invoke-PowerBIRestMethod -Url "gateways/$($BounGateway.value.gatewayId)/datasources/$($BounGateway.value.id)" -Method PATCH -Body $Body | ConvertFrom-Json

The body of the request I have created it using the example from here: https://docs.microsoft.com/en-us/rest/api/power-bi/gateways/update-datasource#oauth2-credentials-example

Finally, as you can see in the script I use an SPN and an access token for it and the last PATCH request returns:

Invoke-PowerBIRestMethod: Line | 44 | Invoke-PowerBIRestMethod -Url "gateways/$($BounGateway.value.gatewayI … | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | One or more errors occurred. (Response status code does not indicate success: 400 (Bad Request).)

I tried to use an actual user to do this operation, but the PATCH request with the user access token returns 401:

Invoke-PowerBIRestMethod: Line | 14 | Invoke-PowerBIRestMethod -Url "gateways/$($BounGateway.value.gatewayI … | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | One or more errors occurred. (Response status code does not indicate success: 401 (Unauthorized).)

This story seems to be related to this , but it is unanswered for OAuth2.

I was wondering is somebody has figured what the issue is, as far as I have searched the only working credential types are "key" and "basic".

@NandanHegde @Jayendran

Re: OAuth2 Dataset Credentails Update after take over fails

V-lianl-msft — Thu, 04 Nov 2021 06:11:59 GMT

You can refer to this thread:

https://community.powerbi.com/t5/Developer/Programmatically-enter-missing-dataset-credentials-using-API/m-p/877900

topic OAuth2 Dataset Credentails Update after take over fails in Developer

OAuth2 Dataset Credentails Update after take over fails

Re: OAuth2 Dataset Credentails Update after take over fails