Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
3 years ago
Solved

REST API Generate access token

Hi all, I couldn't find an answer to the following problem in previous posts.   Problem I want to run a custom script (trough an Azure function) to send rows to a push dataset in PowerBI.  I wan...
Need Help
v-jianboli-msft's avatar
v-jianboli-msft
Community Support
3 years ago

Hi Anonymous ,

 

Consuming Power BI content requires an access token. Depending on your solution, this token can be either an Azure AD token, an embed token, or both.

  • Azure AD Token

For both embed for your customers and embed for your organization solutions, you need an Azure AD token. The Azure AD token is required for all REST API operations, and it expires after an hour.

 

  • Embed Token

When you use the embed for your customers solution, your web app needs to know which Power BI content a user can access. Use the embed token REST APIs to generate an embed token, which specifies the following information:

  •  The content your web app user can access
  •  The web app user's access level (view, create, or edit)

 

If you are still confuse about it, here are some documents about token. Hope they could help you!

Permission tokens needed for embedding a Power BI app - Power BI | Microsoft Learn

Microsoft identity platform access tokens - Microsoft Entra | Microsoft Learn

 

Best Regards,

Jianbo Li

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

  • Anonymous's avatar
    Anonymous
    Not applicable
    3 years ago

    Hey v-jianboli-msft,

    thanks for outlining the differences for the two tokens! I will describe what is the situation now, maybe we can fastly converge to a solution.

     

    - Get an access token; the following request (to obtain an Azure AD token, correct me if I am wrong) is working:

    endpoint: https://login.microsoftonline.com/{{Tenant ID}}/oauth2/v2.0/token

    client_id: my client id

    client_secret: my client secret

    grant_type: https://analysis.windows.net/powerbi/api/.default

     

    This request is successfully generating an Access Token.

     

    - Problem: using this generated Access Token as Bearer Token for the following POST request, does not work

     

    endpoint: https://api.powerbi.com/v1.0/myorg/datasets/{{dataset ID}}/tables/{{Table_Name}}/rows

    bearer token: the access token generated before.

     

    I receive a 401 response, witht the following X-PoweBI-Error-Info:

    "ServicePrincipalIsNotAllowedByTenantAdminSwitch"

     

    Again, if I go, here Push Datasets - Datasets PostRows - REST API (Power BI Power BI REST APIs) | Microsoft Learn, I click try and I use the token generated in this view, everything works fine. 

     

    What am I missing? Could you please, in the best of your knowledge, clarify what kind of token ones need to POST a row in a push dataset on PowerBI, and how to exactly obtain this token?

     

    Thanks!

    • Anonymous's avatar
      Anonymous
      Not applicable
      3 years ago

      I was able to use the access token generated by the request. There were two problems:

      - enable service principal in PowerBI admin interface

      - add my service principal to the right security group 

       

      Thanks for the help, I am accepting the solution, since the request to generate the token works.