Forum Discussion
PowerShell Login with Connect-PowerBIServiceAccount +ServicePrincipal error
Hi,
I am currently testing PowerShell scripts in combination with Power BI REST API which I intend to use in automation scenarios.
At this stage, all tests were successfully completed manually through Windows PowerShell console.
The login option I used was Connect-PowerBIServiceAccount.
So to make a long story short, running
Connect-PowerBIServiceAccount
will generate a prompt asking for user to login. After entering my credentials, script then runs perfectly, executing all defined code blocks, returning expected data results. Still that's not quite sufficient for automation as I need to find a way to remove prompt process. One suggestion was to use Service Principal
Now if I try to run the same Connect-PowerBIServiceAccount method with Service Principal, the following authentication block seems to run fine
Connect-PowerBIServiceAccount -ServicePrincipal -CertificateThumbprint XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX -ApplicationId XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
though it just stalls returning a 403 forbidden status code whenever I try to run any subsequent methods. So something's obviously broken in the authentication process and I don't believe it's strictly relatated to PowerShell.
Any tested and working POC on how to cope with this would be deeply appreciated.
Thank you
Forget about my message. I found the solution. Everything is now running fully as expected😊🌟🌟🌟
4 Replies
Forget about my message. I found the solution. Everything is now running fully as expected😊🌟🌟🌟
Hi,
I am doing some automation using PowerShell script with Power BI REST API. And, I came across your post.
Could you share the solution to overcome 403 forbidden status for subsequent call?
Thanks!
What was the solution MawashiKid2 ?
The solution is to use an SPN (Register an app to embed Power BI content in a Power BI embedded analytics application - Power BI | Microsoft Docs). Once you have an SPN your code will change to:
#replace bold items with your values
$applicationId = "<guid>";
$securePassword = "<password>" | ConvertTo-SecureString -AsPlainText -Force
$credential = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $applicationId, $securePassword
Connect-PowerBIServiceAccount -ServicePrincipal -Credential $credential -TenantId "<tenantid-guid>"
