Hello,
I'm trying to get an AccessToken from https://login.microsoftonline.com/common/oauth2/token but I have two problems
- My user for security reason have MFA enabled, and cannot be disabled.
- The code I have found doesn't work only using clientID and ClientSecret (Source)
The code below generates an access code, but the POST request retrieves 401 status code.
I can disable MFA and enter User and Password and would generate a valid access token, but that generates a massive security problem, besides implies that I would need to have a "permanent" account that would only have access to PBI for doing refreshes - basically a flaw into the system of APIs.
import adal
import requests
from msrestazure.azure_active_directory import AADTokenCredentials
authority_host_uri = 'https://login.microsoftonline.com'
tenant = 'tenant'
authority_uri = authority_host_uri + '/' + tenant
resource_uri = 'https://analysis.windows.net/powerbi/api'
client_id = 'clientid'
client_secret = 'clientsecret'
context = adal.AuthenticationContext(authority_uri, api_version=None)
mgmt_token = context.acquire_token_with_client_credentials(resource_uri, client_id, client_secret)
credentials = AADTokenCredentials(mgmt_token, client_id)
headers = {'Authorization': 'Bearer ' + mgmt_token['accessToken'], 'Content-Type': 'application/json'}
url = 'https://api.powerbi.com/v1.0/myorg/groups/me/datasets/datasetid'
r= requests.post(url, headers=headers)
print(r)
