Forum Discussion

sujaza's avatar
sujaza
Regular Visitor
1 year ago

Connect to Excel file in SharePoint library using Service Principal

All I have been trying to connect to an excel file hosted in a Sharepoint library to my Power BI Report using Service Principal rather than individual's account/credential. This is to replace the in...
Need Help
sujaza's avatar
sujaza
Regular Visitor
1 year ago

Hi v-achippa 

Thank you again for the response!

I have since amended the API permissions on the Service principal to have Sites.Read.All and Files.Read.all for Graph API - Application permissions.

Can you please elaborate on "Grant explicit read access to the service principal at the site or document library level using Microsoft Graph API".

I have used root Sharepoint url of the site to access the site in the Folder connector.

The error remains!

 

 

v-achippa's avatar
v-achippa
Community Support
1 year ago

Hi sujaza,

 

  • Thank you for the response. Now that you have added Sites.Read.All and Files.Read.All permissions to the Service Principal, in most cases these should generally be sufficient for accessing the SharePoint content.
  • When you were using Sites.Selected before, microsoft requires to manually grant access to specific SharePoint sites. Which means explicitly telling SharePoint like allow this app (Service Principal) to read this site.

This can be done by using a Microsoft Graph API POST request:

Endpoint: POST https://graph.microsoft.com/v1.0/sites/{site-id}/permissions

 

Request body:

{

  "roles": [ "read" ],

  "grantedToIdentities": [

    {

      "application": {

        "id": "client-id",

        "displayName": "app-name"

      }

    }

  ]

}

Replace ‘site-id’ with your SharePoint Site ID, ‘client-id’ with your Azure App (Service Principal) Client ID and ‘app-name’ with the display name of your registered app. This will explicitly grants read access to the SharePoint site for the Service Principal.

 

If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it! 

 

Thanks and regards,

Anjan Kumar Chippa