Admin - Get Activity Events - Response code: 400

[Anonymous]

Hello,

I'm trying to get the API Rest Get Activity Events information on my tenant

I've made a small test on https://learn.microsoft.com/en-us/rest/api/power-bi/admin/get-activity-events using my account (am Azure admin and Power BI admin) but it seems there is a problem:

One of my coworkers tried this test on his client (where's he's not admin) and he gets en error 401 "Unauthorized", but I'm getting an error 400 “Bad Request”, why?

The Develeper settings in the Power BI tenant admin portal are correctly set:

As the Microsoft Azure App registration:

I also tryed to call the API using Postman with a generated Token, but it keeps saying PowerBINotAuthorizedException

Generating the Token:

Calling the activityevents:

Have I missed something?

[Cassie_9]

With same App registration config (delegated), I had the same activityEventEntities response 400 issue recently, it has been fixed by updating the date formatting. Try matching the date format of "CreationTime" to "2025-03-03T00:00:14".

Or anyone using Python can follow the code below:

date = (datetime.now() - timedelta(days=1)).date().strftime("%Y-%m-%d")

----- Python code Start -----

# define powerbi-api-secret

client_id = 'xxx'

tenant_id = 'xxx'

client_secret = dbutils.secrets.get(scope="xxx", key="xxx")

# define get_auth_token

def get_auth_token(tenant_id,client_id, client_secret😞

    credentials = ClientSecretCredential(

        client_id=client_id,

        client_secret=client_secret,

        tenant_id=tenant_id,

    )

    auth_token = credentials.get_token("https://analysis.windows.net/powerbi/api/.default").token

    return auth_token

 # test your activityEventEntities result use below

auth_token = get_auth_token(tenant_id, client_id, client_secret)

date = (datetime.now() - timedelta(days=1)).date().strftime("%Y-%m-%d")

url = f"https://api.powerbi.com/v1.0/myorg/admin/activityevents?startDateTime='{date}T00:00:00'&endDateTime='{date}T23:59:59'"

headers = {'Authorization': f'Bearer {auth_token}'}

response = requests.get(url=url, headers=headers)

if response.status_code == 200:

    response_json = response.json()  

    print(f"Success {response.status_code}: {response.reason}\nTotal activityEventEntities: {len(response_json['activityEventEntities'])}")

    print(json.dumps(response_json, indent=4))  

else:

    print(f"Error {response.status_code}: {response.reason}")

----- Python code End -----

Cheers

Cass

[Anonymous · Accepted solution]

Thanks for the reply from lbendlin , please allow me to provide another insight: 
Hi  @Anonymous ,

Based on the official documentation mentioned, "

When running under service prinicipal authentication, an app must not have any admin-consent required premissions for Power BI set on it in the Azure portal.", it means that all the Power BI permissions granted for this must be un-consent and removed for a new service principal AAD token to grant for the rest API running, as long as you have enabled this tenant admin setting

Admin - Get Activity Events - REST API (Power BI Power BI REST APIs) | Microsoft Learn

Best Regards,

Liu Yang

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[lbendlin]

Permissions
The user must have administrator rights (such as Office 365 Global Administrator or Power BI Service Administrator) or authenticate using a service principal.
Delegated permissions are supported.
When running under service prinicipal authentication, an app must not have any admin-consent required premissions for Power BI set on it in the Azure portal.

[Anonymous]

Are you speaking about this, I can't turn it off?

I also tried those 2 options in Azure Portal but it ain't changing anything: