topic Re: Update DataSource parameter with API in Developer

Update DataSource parameter with API

udione — Sun, 25 Feb 2024 15:01:08 GMT

I'm trying to update DataSource Parameters with this code:

string scope = "https://analysis.windows.net/powerbi/api/.default"; IConfidentialClientApplication app = ConfidentialClientApplicationBuilder.Create(clientId) .WithClientSecret(clientSecret) .WithAuthority(new Uri(authority)) .Build(); string[] scopes = new string[] { scope }; AuthenticationResult result = null; result = await app.AcquireTokenForClient(scopes).ExecuteAsync(); PowerBIClient pbiClient = new PowerBIClient(new Uri("https://api.powerbi.com/"), new TokenCredentials(result.AccessToken, "Bearer")); var refds = await pbiClient.Datasets.UpdateParametersInGroupWithHttpMessagesAsync(_groupId, _datasetId, new UpdateMashupParametersRequest(new UpdateMashupParameterDetails("orgId", "98")));

I get: Operation returned an invalid status code 'Forbidden'

I've turned on every possible setting in Tenant Settings in Power BI and Api privileges for App Registration in Azure.

I'm new, trying things out as Pro Licence without any reserverd capacity in Azure Power Bi Embedded - is that necessary?

Re: Update DataSource parameter with API

lbendlin — Sun, 25 Feb 2024 16:35:01 GMT

take your token to jwt.io and examine the "scp" (scope) section. Most likely the token is hollow.

Re: Update DataSource parameter with API

udione — Sun, 25 Feb 2024 16:50:41 GMT

There is no scp section at all in the token. How can I fixed that?

Re: Update DataSource parameter with API

lbendlin — Mon, 26 Feb 2024 00:52:11 GMT

go back to your app registration and ask for better permissions.

Re: Update DataSource parameter with API

udione — Mon, 26 Feb 2024 05:57:54 GMT

I've already turned on in azure everything that is related to Power Bi for the app. Can you advise which specific permissions it needs ?

Re: Update DataSource parameter with API

lbendlin — Mon, 26 Feb 2024 11:53:27 GMT

Did you delegate?

Re: Update DataSource parameter with API

udione — Mon, 26 Feb 2024 11:56:28 GMT

Sorry, but what exactly do you mean by delegate?

Re: Update DataSource parameter with API

lbendlin — Mon, 26 Feb 2024 12:19:34 GMT

Have you asked for straight permissions or delegated permissions?

Re: Update DataSource parameter with API

udione — Mon, 26 Feb 2024 12:38:20 GMT

I'm using app-only access, so no delegated permissions.

Re: Update DataSource parameter with API

lbendlin — Mon, 26 Feb 2024 13:46:15 GMT

this may help

Microsoft Azure AD JWT Token is missing Scope information - Microsoft Q&A

Re: Update DataSource parameter with API

udione — Mon, 26 Feb 2024 13:56:21 GMT

Does this imply that I can only methods like

UpdateParametersInGroupWithHttpMessagesAsync

only if I get user access token and cannot just use token quired using only applicattion secret?

Re: Update DataSource parameter with API

lbendlin — Mon, 26 Feb 2024 14:13:29 GMT

no scope = no worky

Re: Update DataSource parameter with API

udione — Tue, 27 Feb 2024 10:52:20 GMT

I've changed that now my user (which is admin in PowerBI) is used for fetching access token.

I can execute methods like pbiClient.Datasets.GetDatasetsInGroup

But when executing pbiClient.Datasets.UpdateParametersInGroupWithHttpMessagesAsync

I still get Forbidden result.

Decrypted token in jwt.io still does not have scp.