Getting forbidden error when trying to create a workspace using the dotnet core SDK

[aaronfdsouza]

I am using the dotnet core SDK with a service principal and I need to create a workspace. 

My code looks like this

var credentials = await Token.GetTokenCredentials(clientId, clientSecret, tenantId);
using (PowerBIClient client = new PowerBIClient(credentials))
{
  GroupCreationRequest request = new GroupCreationRequest
  {
    Name = "MyNewWorkspace"
  };
  await client.Groups.CreateGroupAsync(request);
}

The service principal corresponding to the client has the following API permissions

• Capacity.Read.All
• Capacity.ReadWrite.All
• Workspace.Read.All
• Workspace.ReadWrite.All

  Is there some admin level setting that I need to be aware of?

[aaronfdsouza · Accepted solution]

I found that my administrator has restricted access.

[Anonymous]

Hi @aaronfdsouza ,

As far as I know, we can use API call by a service principal profile to create a new workspace in Power BI Service. For more information see: Service principal profiles in Power BI Embedded.

For more details about this REST API.

Groups - Create Group - REST API (Power BI Power BI REST APIs) | Microsoft Learn

Best Regards,
Rico Zhou

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.