Operation returned an invalid status code 'Forbidden' when retrieving embed GenerateTokenAsync

[Merry]

Hi everyone,

Our reports in power bi embedded stopped working . It has been working and all of a sudden it give us the Forbidden status.

We are using service principal model. 

We I debug the code Power Bi Client if successful instantiated, I can even get the list of my respots in workspace how ever when it reaches to return await PowerBiClient.EmbedToken.GenerateTokenAsync(tokenRequest) it fails.

We checked the Audit log on Power Bi but we could not find anything valuable on there.

We have a Power BI Premuim  Licence and dedicated Capacity.

Any advice would be much apprecaited!

Thanks,

Maryam

[Merry · Accepted solution]

Thank you for the information . It turned out that embedding Power BI reports on the tenant was disabled wrongly, 

[Ruchita]

I was also facing the same issue. All the API permissions were correct and it was getting hard to find the problem. So I registered a new service principal in Azure and did not configure any permissions for the service principal. And embedded the new IDs in my web app, the error got resolved. It seems there were some issue in the previous service principal.

[Merry · Accepted solution]

Thank you for the information . It turned out that embedding Power BI reports on the tenant was disabled wrongly, 

[saifulsj]

I have exact same issue also have dedicated embed capacity and still getting 403 to acquire Embed Token

[v-rzhou-msft]

Hi @Merry ,

how ever when it reaches to return await PowerBiClient.EmbedToken.GenerateTokenAsync(tokenRequest) it fails.

I think there should be something wrong in generate embed token. As far as I know, your service prinicpal will generate access token and then generate embed token to your customers. 

You may refer to this offical blog to learn more details about the workflow.

For refernece:

Authentication flows

Generate an embed token

I suggest you to have a test to generate access token and then generate embed token by bear token(access token) in Postman by Rest API.

Using Postman, we use below POST REST API with body information to get the Bearer Token

To use this, we will need to configure the Body as below,

Then generate embed token in Postman.

Embed Token - Generate Token

Best Regards,
Rico Zhou

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[Merry · Accepted solution]

Thank you s o much! We found the issue. For some reason in Admin center under Tenant --> Developer  Setting --> Embed contenet in apps had been removed. Once we specified the security group the issue is resolved.

Thanks,

Maryam