Forum Discussion
REST API - DataflowUnauthorizedError - You do not have permissions to manage this dataflow
Managed to solve it!
In the question I mentioned that I can't GET https://api.powerbi.com/v1.0/myorg/groups/{groupId}/dataflows from a specific {groupId}, it is because I don't have access to that workspace, somehow I did get that workspace from /admin scope. So when I tried to access https://api.powerbi.com/v1.0/myorg/groups/{groupId}/dataflows/{dataflowId}/transactions it gives me the DataflowUnauthorizedError.Conclusion, I had to add the registered app to the workspace and have the Data.Flow.Readall scope.
Check your token at jwt.io - it may be missing the required scope.
{ "aud": "https://analysis.windows.net/powerbi/api", "iss": "https://sts.windows.net/[REDACTED]/", "iat": 1719196276, "nbf": 1719196276, "exp": 1719200176, "aio": "E2dgYLgrz3f3c6PCxuraFxsVVVftBgA=", "appid": "[REDACTED]", "appidacr": "1", "idp": "https://sts.windows.net/[REDACTED]/", "idtyp": "app", "oid": "[REDACTED]", "rh": "0.ATkAYkkmpb624k-pdnh1y3Dc8QkAAAAAAAAAwAAAAAAAAAA5AAA.", "sub": "[REDACTED]", "tid": "[REDACTED]", "uti": "r-AHRRWExUeLbRCdD1U8AA", "ver": "1.0", "xms_idrel": "6 7" }Thank you for your response, and sorry for getting back late!
Here is the payload from jwt.io, but I don't know which field is referred to scope!
So just to break down, I request the token with this info
{ 'grant_type': 'client_credentials', 'login_url': 'https://login.microsoftonline.com/{tenant_guid}/oauth2/v2.0/token', 'scope': 'https://graph.microsoft.com/.default' }I believe the scope is automatically resolve?