Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

The ultimate Microsoft Fabric, Power BI, Azure AI & SQL learning event! Join us in Las Vegas from March 26-28, 2024. Use code MSCUST for a $100 discount. Register Now

Reply
SMR1989
Advocate I
Advocate I

Call Power BI REST API without delegated permissions

Hello, we need to use the Power BI API in order to get metadata about data refresh from an external app.

 

It looks like the only valid authentication method is through delegated permissions, but for security reasons, we can't have a single user with access to every workspace in the company.

 

Anybody knows if there is any other authentication method to get metadata of every dataset in the company without a generic user with access to all workspaces?

 

Thank you!

1 ACCEPTED SOLUTION
SMR1989
Advocate I
Advocate I

Finally, our approach was to create a service principal in Azure. 

Use Azure service principals with Azure PowerShell | Microsoft Docs 

View solution in original post

5 REPLIES 5
SMR1989
Advocate I
Advocate I

Finally, our approach was to create a service principal in Azure. 

Use Azure service principals with Azure PowerShell | Microsoft Docs 

v-lionel-msft
Community Support
Community Support

Hi @SMR1989 ,

 

" I wonder if we could create a user with access to ALL datasets, but with no access to power bi service. So that this user can only access to the dataset throught the API."

I suddenly thought that maybe you can use O365 administrator account to get Audit log instead of API.

v-lionel-msft_1-1615967633295.pngv-lionel-msft_0-1615967614098.png

 

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

 

Hi @v-lionel-msft, thank you so much for your support. Finally, it seems that we found the solution creating a "service principal" in Azure. 

v-lionel-msft
Community Support
Community Support

Hi @SMR1989 ,

 

“Anybody knows if there is any other authentication method to get metadata of every dataset in the company without a generic user with access to all workspaces?”

v-lionel-msft_0-1615363897953.png

If the current account does not have the build permission of the dataset, it is impossible to obtain the dataset through the API. So your idea cannot be realized. You may need different accounts to obtain the corresponding data set information, and then merge them.

 

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Hi @v-lionel-msft,

 

Thanks for your answer, I really appreciate your point of view and we will evaluate the approach of using several accounts and merge the data.

 

In order to explore all the possibilities, I wonder if we could create a user with access to ALL datasets, but with no access to power bi service. So that this user can only access to the dataset throught the API.

 

Thanks for your support!

Helpful resources

Announcements
Fabric Community Conference

Microsoft Fabric Community Conference

Join us at our first-ever Microsoft Fabric Community Conference, March 26-28, 2024 in Las Vegas with 100+ sessions by community experts and Microsoft engineering.

February 2024 Update Carousel

Power BI Monthly Update - February 2024

Check out the February 2024 Power BI update to learn about new features.

Fabric Career Hub

Microsoft Fabric Career Hub

Explore career paths and learn resources in Fabric.

Fabric Partner Community

Microsoft Fabric Partner Community

Engage with the Fabric engineering team, hear of product updates, business opportunities, and resources in the Fabric Partner Community.