What is the "Web API" permission, when connecting to web?

[alexbjorlig]

I'm new to Power BI, and have created a workbook connecting to a web REST API.

When I click on the "Data Source Settings" button, I don't understand the permission option "Web API":

Where is the "key" being sent in the request for the web resource?

[v-yuta-msft]

@alexbjorlig ,

You need to input the access token in that option when you use rest api to connect to data source.

Community Support Team _ Jimmy Tao

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[alexbjorlig]

Ok, but where is that access token embedded in the request? As a bearer token? Basic auth? query param? 

[v-yuta-msft]

@alexbjorlig ,

The access token is a method of http request authentication. It's can be added in the headers part of the http request. If the web api you use doesn't have such token, you can use other connection way(e.g.: basic auth or organizational account)

Community Support Team _ Jimmy Tao

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[alexbjorlig]

Thanks for taking your time to reply, but I still think it's very unclear what happens.

If I provide the token "123" as "access token", where is this token send in the request? Is it part of the Authorization header?

[v-yuta-msft]

@alexbjorlig ,

Yes, it's an authorization part which should be added in header. I would suggest you read the doc below:

https://auth0.com/docs/flows/guides/auth-code/call-api-auth-code

Community Support Team _ Jimmy Tao

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[alexbjorlig]

---

@v-yuta-msft wrote:

@alexbjorlig ,

Yes, it's an authorization part which should be added in header...

---

Wait a moment - should be added in header? We are talking about a GUI dialog box where I can input a token. My question is: 

Where is this token being added? I don't understand how linking to the Auth0 article helps answer that question?