Error 'API is not accessible for application' when I run API GetAppUsersAsAdmin on Postman

[CorradoPag]

Hi, I'm trying to run the GetAppUsersAsAdmin API on Postman.
I registered an app giving the authorization "Tenant.Read.All", but in the status appears the message: "not granted for ...", in the column "Admin consent required" has the value "No".
I get the application token from "://login.microsoftonline.com/tenant_id/oauth2/v2.0/token" with the user who has the roles: "Administrator Power Platform" and "Administrator of Power BI"
When I launch GET "://api.powerbi.com/v1.0/myorg/admin/apps/app_Id/users" from Postman I get the error "API is not accessible for application"
Can someone help me? Thank you. 

[CorradoPag · Accepted solution]

I solved it, I enabled the option "Allow service principals to use read-only admin APIs" in the menu Settings -> Admin Portal

[CorradoPag]

Hi @v-yiruan-msft , thanks for the support. I still have the problem

In Postman I get the relative token

and I use the token in the API PBI call, the appID I get it from the Power BI app URL, this URL is an example.

The two APIs need the admin grant, maybe that's the problem?

There are no Power BI admin-consent-required permissions set on this application

[v-yiruan-msft]

Hi @CorradoPag  ,

Whether your problem has been resolved? If yes, could you please mark the helpful post as Answered? It will help the others in the community find the solution easily if they face the same problem as yours. Thank you.

Best Regards

[CorradoPag]

Hi @v-yiruan-msft, they gave me the rights for the two scopes

but the error still appears

[v-yiruan-msft]

Hi @CorradoPag ,

Yes, exactly. From the screenshot you provided, it looks like the required scope (Tenant.Read.All or Tenant.ReadWrite.All) to run that Admin REST API is not being met.

You can try to see if the desired result is returned after giving the appropriate permissions by referring to the documentation below.

Modifying Permissions of an Existing App Registration

Best Regards

[v-yiruan-msft]

Hi @CorradoPag ,

Whether your problem has been resolved? If yes, could you please mark the helpful post as Answered? It will help the others in the community find the solution easily if they face the same problem as yours. Thank you.

Otherwise,  you can follow the below steps to get it. 

1. Sign in Power BI Service with Power BI Admin account

2. Click "F12" and navigate to "Network" tab to get the token

3. Call the REST API GetAppUsersAsAdmin by Postman

Best Regards

[Maria003]

worked for me ! thanks so much

[v-yiruan-msft]

Hi @CorradoPag ,

According to your description, it seems that the permission and scope are OK (Power BI Admin and has Tenant.Read.All permissions). Could you please tell me how you get the value of the parameter {appId} mentioned there? Can you provide a screenshot of the steps involved? Thank you.

Also, please check the documentation below, I hope it will help you to solve the problem.

Power BI - On Cloud

Important:  Make sure there are no Power BI admin-consent-required permissions set on this application. For more information, see Managing consent to applications and evaluating consent requests.

---

Grant tenant-wide admin consent to an application

Best Regards