topic Re: Admin API's and Service Principal Authentication = 401 Unauthorized in Developer

Admin API's and Service Principal Authentication = 401 Unauthorized

powerbi_jenhen — Thu, 08 Dec 2022 21:22:22 GMT

Hi,

I have registered an azure app for my service principal, added it to an Azure Security group and added this group to my admin and non-admin api tenant developer settings. The app has been granted the correct API permissions for Power BI Service without any admin consent requirements (see below). I have added the group with admin permissions to all tenant workspaces. Via Powershell I can successfully authenticate using the service principal for non-admin api calls but everytime I attempt to call admin api calls, like the below, I receive "401 Unauthorized"?? Any help appreciated.

Invoke-PowerBIRestMethod -Url 'admin/groups?$top=100' -Method Get | ConvertFrom-Json

Re: Admin API's and Service Principal Authentication = 401 Unauthorized

Anonymous — Fri, 09 Dec 2022 07:24:14 GMT

Hi @powerbi_jenhen ,

According to the error code, it seems that you didn't get the proper permission to access Admin REST API. Please check if you enable the option Allow service principals to use read-only Power BI admin APIs under Admin API settings in Admin portal.

Enable service principal authentication for read-only admin APIs

Best Regards

Re: Admin API's and Service Principal Authentication = 401 Unauthorized

powerbi_jenhen — Fri, 09 Dec 2022 13:47:29 GMT

Hi,

Thanks for your reply. Yes, this option has been enabled for my security group but I still get the 401?

Thanks.

Re: Admin API's and Service Principal Authentication = 401 Unauthorized

powerbi_jenhen — Wed, 15 Mar 2023 17:54:04 GMT

I figured this out, my azure app permissions of type "Application" had "Admin consent", as described in the below article, this must be remove:

Enable service principal authentication for read-only admin APIs - Power BI | Microsoft Learn