topic Re: Dataset refresh REST API, Service Principal Not Authorised in Developer

Dataset refresh REST API, Service Principal Not Authorised

Anonymous — Fri, 01 Jul 2022 10:52:01 GMT

Hi all,

I'm trying to trigger a refresh via the Rest API using a service principle registered app. So far, the app has been granted all PowerBi permissions in Azure, it is also part of a a security group with all PowerBi permissions, and I have granted API access for service principals in the admin portel. Futhermore, the service principle has admin access in the workspace of the dataset in question.

When making the REST API request, I successfully aquire an access token with the service principle client info:

import requests url = 'https://login.microsoftonline.com/common/oauth2/token' data = { 'grant_type': 'client_credentials', 'scope': 'https://api.powerbi.com', 'resource': 'https://analysis.windows.net/powerbi/api', 'client_id': <Client ID>, 'client_secret': <Client Secret> } r = requests.post(url, data=data) access_token = r.json().get('access_token')

However when I make the request using this token, I get a response error 401, not authorised:

header = {'Authorization': f'Bearer {access_token}'} url='https://api.powerbi.com/v1.0/myorg/groups/' + <Group ID> + '/datasets/' + <Dataset ID> + '/refreshes' r = requests.post(url=url, headers=header) print(r.status_code)

I can only imagine it's some authorisation issue external to the request. Any ideas?

Re: Dataset refresh REST API, Service Principal Not Authorised

Anonymous — Mon, 04 Jul 2022 09:19:14 GMT

HI @Anonymous,

As the document mentions, this refresh API required an additional option 'notifyOption' in the body. I'd like to suggest you add it to your request and try again:

Datasets - Refresh Dataset In Group - REST API (Power BI Power BI REST APIs) | Microsoft Docs

BTW, what type of data source are you working on? If you mean Azure Analysis Services, it seems to need additional permission for that instance.

Regards,

Xiaoxin Sheng

Re: Dataset refresh REST API, Service Principal Not Authorised

mariussve1 — Mon, 04 Jul 2022 10:00:13 GMT

Hi,

I think you need to add the SPN as admin in the Workspace where your dataset is stored. The best way to do this is, if you havent already done this, is to put the SPN in a Security Group in AAD. Then grant this security group admin access to the workspace. After you have granted access it can take a while before the access has been granted, so I suggest to wait 30 min before trying the REST API again.

Br
Marius