I'm trying to use the power bi rest api admin endpoint: https://api.powerbi.com/v1.0/myorg/admin/activityevents
I'm using the authorization token generated by this other endpoint: https://login.microsoftonline.com/common/oauth2/token
This is my request body:
grant_type=password
&username=*************
&password=*************
&client_id=*************
&client_secret=*************
&resource=https://analysis.windows.net/powerbi/api
The token response looks like this:
{
"token_type": "Bearer",
"scope": "App.Read.All Capacity.Read.All Capacity.ReadWrite.All Content.Create Dashboard.Read.All Dashboard.ReadWrite.All Dataflow.Read.All Dataflow.ReadWrite.All Dataset.Read.All Dataset.ReadWrite.All Gateway.Read.All Gateway.ReadWrite.All Report.Read.All Report.ReadWrite.All StorageAccount.Read.All StorageAccount.ReadWrite.All Workspace.Read.All Workspace.ReadWrite.All",
"expires_in": "3599",
"ext_expires_in": "3599",
"expires_on": "1594202241",
"not_before": "1594198341",
"resource": "https://analysis.windows.net/powerbi/api",
"access_token": "eyJ0eXAiOi..."
"refresh_token": "0.ATAAsjCPS..."
}
The response scope attribute is not including Tenant.Read.All nor Tenant.ReadWrite.All even though I have added those API permissions and also granted admin consent for those permissions in the API permission azure console page.
Those permissions are required to be able to access the activityevents endpoint.
Can anyone point me to what I'm missing?
How can I get the Tenant.Read.All nor Tenant.ReadWrite.All permissions assigned to the scope of my authorization token?
