Service Principal - Can not grant access to my Workspace

[AnthonyLEVEILLE]

Hello, I have a PPU and purchased a capacity in Azure. I currently use my Powerbi Reports inside of my own apps, using the Report option.

I am having troubles doing someting i've done several times already. I can not grant access to my Service Principal (named LEILA AMG Stage), to a certain workspace name DEMO.

As you can see, in the above, the administration of my Service is done. See below :

Now, when I try to grant access to the Workspace for my Service Principal named LEILA AMG Stage, it does not appear in the listed names as "Service Principal". Indeed, the Service Principal is listed just like a normal user. See below :

This configuration does not work in my apps and I have some token auth issues...

Actually, I noticed that in my other Workspaces, that work properly with my app, the Service Principal is actually listed as one.

See below an other Workspace, named LEILA AMG, where LEILA AMG Stage is correctly listed as Service Principal. See Below :

How come I can not set up LEILA AMG Stage as Service Principal for my DEMO Workspace ?

Thanks,

Anthony

[Anonymous · Accepted solution]

Hi @AnthonyLEVEILLE ,

Could you please check and confirm the following info?

1. Identity Type Verification:Based on the provided screenshot, it appears that “LEILA AMG Stage” might be categorized as a security group rather than a service principal. I recommend verifying in the Azure portal whether there exists both a security group and a service principal with the same name.  
2. Workspace Type Consistency: Confirm whether both the “DEMO” workspace and other workspaces are of the same type (e.g., Premium Per User (PPU) workspaces). If they differ, this could impact the behavior of the service principal.

3. Configuration Guidance: For proper configuration, refer to the relevant documentation on configuring service principals in Power BI. The appropriate setup ensures seamless integration and access control. 

4. Troubleshooting Step: Consider removing and then re-granting access to the service principal “LEILA AMG Stage” specifically for the “DEMO” workspace. Observe whether it correctly displays as a service principal after this action.

Feel free to reach out if you need further assistance or clarification. We’re here to help!

Best Regards

[AnthonyLEVEILLE · Accepted solution]

Hello! Thanks for replying so fast.

After checking up the workspaces settings, I then looked at Azure parameters and solved the problem by noticing that  :

Now, in Azure, the actual App "App LEILA" is listed as the Service Principal of LEILA AMG Stage Security Group.

I then went back to PBService and when granting access to the DEMO workspace, instead of typing LEILA AMG, I typed "App LEILA". Surprinsigly, the search engin found it. See picture below:

By selecting the first choice, it got added to the granted access list. See picture below :

And then, finally, aftert refreshing the page,  "App LEILA" disapeared from the grandted access list, and got replaced by the actual Security Group "LEILA AMG Stage" with the "(Principal du service)" mention.

See picture above : 

Thanks for your help,

Anthony

[Anonymous · Accepted solution]

Hi @AnthonyLEVEILLE ,

Could you please check and confirm the following info?

1. Identity Type Verification:Based on the provided screenshot, it appears that “LEILA AMG Stage” might be categorized as a security group rather than a service principal. I recommend verifying in the Azure portal whether there exists both a security group and a service principal with the same name.  
2. Workspace Type Consistency: Confirm whether both the “DEMO” workspace and other workspaces are of the same type (e.g., Premium Per User (PPU) workspaces). If they differ, this could impact the behavior of the service principal.

3. Configuration Guidance: For proper configuration, refer to the relevant documentation on configuring service principals in Power BI. The appropriate setup ensures seamless integration and access control. 

4. Troubleshooting Step: Consider removing and then re-granting access to the service principal “LEILA AMG Stage” specifically for the “DEMO” workspace. Observe whether it correctly displays as a service principal after this action.

Feel free to reach out if you need further assistance or clarification. We’re here to help!

Best Regards