Error EvaluateNativeQueryUnpermitted trying to use Starburst connector

[lg01]

We are trying to up create a DirectQuery connection to a Starburst Trino database. We are using the Trino connector, add the host, port and Catalog information. When we do not add a "Native Query" then we can connect without issue and load the data. When we use a "Native Query", then we end up woith the following error:

"EvaluateNativeQueryUnpermitted failure: the query" ..... "isn't approved for execution"

We do not know why the error comes up. We tried the query from a different client (DBeaver) and the query runs just fine. So there is NO issue with the query.  I thought it was something related to permissions; but that is not it. I am an admin in Power Bi I still get the error.

[lg01 · Accepted solution]

I figured out the issue. It is a security setting in the application. To resolve it, go to  File > Options and Settings > Options.

Under the Security section, uncheck the option that says "Require user approval for new native database queries" and the queries will run. If there is a different way to uncheck this for all users and someone know, please, let me know.

[Denisecrv]

Salvoooooou demais 🤙

[Anonymous]

Hi @lg01 ,

This error typically indicates that Power BI is restricting the execution of the native query for security or configuration reasons.

Utilize the Query Diagnostics feature in Power BI Desktop to gain more insight into what happens when the error occurs. This tool can help identify if there are any specific steps in the query execution process where Power BI is blocking the native query. For more information on using Query Diagnostics, please refer to the following documentation:Power BI implementation planning: Data-level auditing - Power BI | Microsoft Learn

Best Regards,

Xianda Tang

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[lg01]

Thank you. I did that and found this error:

ExceptionType: Microsoft.Mashup.Engine.Interface.QueryPermissionException, Microsoft.MashupEngine

That looks like it is not authenticating. The interesting thing is that it does authenticate when I log in. Now, I know the database works with Kerberos authetication and I could not use that, so I tried LDAP which logged me in. But it does not seem to work with that

[Anonymous]

Hi @lg01 ,

There are other methods of authentication that could be considered.

Basic authentication:
Basic authentication involves sending a username and password in plain text over the network. While it is not as secure as Kerberos, it may be an option if other methods fail.
Be careful when using basic authentication, especially on unsecured networks.
OAuth or token-based authentication:
If your data source supports OAuth or token-based authentication, consider using it.
OAuth allows users to grant third-party applications limited access to their resources without having to share their credentials directly.

Kerberos authentication troubleshooting guidance - Windows Server | Microsoft Learn

Best Regards,

Xianda Tang

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.