topic Re: Access PowerBi API on a CGG in Developer

Access PowerBi API on a CGG

estuck1991 — Tue, 31 Dec 2024 22:34:31 GMT

Hi All,

I am trying to view reports through API endpoint https://api.high.powerbigov.us/v1.0/myorg/reports.
I have and app registration in azure with a client secret and permissions on api as follows:

Using the following I get a token from https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/token

However when i try to use the token i get X-PowerBI-Error-Info: InvalidToken

I have set the "Service Principals can use Fabric API's" to a security group and have made sure the azure app registration is in that security group.

Is there something that i am missing in the configuration?

Re: Access PowerBi API on a CGG

lbendlin — Tue, 31 Dec 2024 23:55:28 GMT

As I understand it the issue may be with the Delegated scope. Try the app registration again but choose the other, non-delegated option.

Re: Access PowerBi API on a CGG

estuck1991 — Thu, 02 Jan 2025 17:28:38 GMT

I have switched to the only 2 API permissions for the Application Permissions on Microsoft Power BI Government Community Cloud.

However still getting 403 forbidden with invalidtoken

Re: Access PowerBi API on a CGG

Anonymous — Fri, 03 Jan 2025 07:28:12 GMT

Thanks for the reply from lbendlin , please allow me to provide another insight:
Hi @estuck1991 ,

If the token generated by the service principal runs the API, the application should not grant any delegated permission, but should grant application permission. For specific permisson configuration needs, please refer to this restriction document:

Token - Generate Token - REST API (Power BI Power BI REST APIs) | Microsoft Learn

For the tenant admin setting that needs to be turned on, please refer to this document:

Use service principal profiles to manage customer data in multitenant apps - Power BI | Microsoft Learn

Best Regards,

Liu Yang

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.