Forum Discussion

FabricUser101's avatar
FabricUser101
New Member
1 year ago
Solved

Can't add dataset application perms for Power BI Azure integration?

I'm trying to let a Service Principal account refresh my Power BI semantic model from a Python script. I've registered the app through Azure. I've done: Added the Service Principal account to the w...
Need Help
  • V-yubandi-msft's avatar
    V-yubandi-msft
    1 year ago

    Hi FabricUser101 ,

    Thank you for reaching out. I understand you’re trying to refresh a Power BI semantic model using a Service Principal and a Python script, but you’re encountering issues because you can’t find the Dataset.ReadWrite.All application permission in Azure, and your script likely fails with a permissions error.

     

    In addition to Akash_Varuna & tackytechtom  responses.

     

    Since you’ve already enabled  Allow service principals to use Fabric APIs,  let’s add your Service Principal to an allowed group. Confirm Allow service principals to use Fabric APIs  is enabled, select Specific security groups, and add your PowerBI ServicePrincipals group.
     Automate Power BI Premium workspace and semantic model tasks with service principals - Power BI | Microsoft Learn

     

    You’ve added the Service Principal to the workspace, but let's make sure it has the correct role. Verify that your Service Principal (its security group) has at least the Contributor role (Admin is also acceptable). This role allows it to refresh the semantic model.

    Roles in workspaces in Power BI - Power BI | Microsoft Learn

    Regards,

    Yugandhar.

tackytechtom's avatar
tackytechtom
Icon for Most Valuable Professional rankMost Valuable Professional
1 year ago

Hi FabricUser101 ,

 

I happened to have written a couple of blog articles about refreshing semantic models, where the setup is also explained:
https://www.tackytech.blog/how-to-refresh-power-bi-datasets-from-data-factory-with-managed-identity/#-1.-Create-a-security-group-in-Azure-and-add-the-managed-identity-of-the-data-factory-to-it

 

In the case above, we used a data factory pipeline that refreshed a semantic model via managed identity. However, the concept with security groups and allowing APIs and stuff, should be the same (see step 1 and 2).

 

Can you try it the way its explained in the blog article? If this does not work, can you provide some more information on from where you wanna do the refresh call e.g. is it a notebook inside fabric? Then you could use semantic-link for that.

 

/Tom
https://www.tackytech.blog/
https://www.instagram.com/tackytechtom/