Forum Discussion

dom99's avatar
dom99
Advocate V
6 years ago
Solved

Set Service Principal s Dataset Owner

Hi,

 

I wonder if someone can help me. I need to set an existing dataset to be owned by a service principal but cant seem to manage it.

 

the two options I can see are:

 

1. Manually set it - cant do this because setting manually assigns the dataset ownership as the logged in user, but you cant log in to the service as a service principal

 

2. use the powershell API - same problem here, there doesnt seem to be an option to set who owns it, it just picks up the logged in user and I dont know how to log in via the API as a service principal. Found a take over script example here https://github.com/Azure-Samples/powerbi-powershell/blob/master/takeover-dataset.ps1

 

Does anyone know how I can do this?

 

Thanks

Need Help
  • Jayendran's avatar
    Jayendran
    6 years ago

    Hi dom99 ,

     

    Using powershell it is possible

     

    I already created the entier script and published here

    https://gallery.technet.microsoft.com/AzureDevOps-CICD-for-fefd58b8

     

    The powershell scripts looks like

     

    $applicationId = "" 
$clientsec = "" | ConvertTo-SecureString -AsPlainText -Force # 
 
$credential = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $applicationId, $clientsec 
Connect-PowerBIServiceAccount -ServicePrincipal -Credential $credential -TenantId "" 
  
 
$workspacename="PowerBI_CICD_PROD" 
$datasetname="AdventureReports" 
##Getworksapce 
 
$workspace =Get-PowerBIWorkspace -Name $workspacename 
 
# GetDataSets 
$DatasetResponse=Invoke-PowerBIRestMethod -Url "groups/$($workspace.id)/datasets" -Method Get | ConvertFrom-Json 
 
 
# Get DataSet 
$datasets = $DatasetResponse.value 
 
     foreach($dataset in $datasets){ 
                if($dataset.name -eq $datasetname){ 
                $datasetid= $dataset.id; 
                break; 
                } 
 
            } 
 
## Take Over DataSet 
 
Invoke-PowerBIRestMethod -Url "groups/$($workspace.id)/datasets/$($datasetid)/Default.TakeOver" -Method Post

     

6 Replies

  • Jayendran's avatar
    Jayendran
    Solution Sage
    6 years ago

    Hi dom99 ,

     

    Using powershell it is possible

     

    I already created the entier script and published here

    https://gallery.technet.microsoft.com/AzureDevOps-CICD-for-fefd58b8

     

    The powershell scripts looks like

     

    $applicationId = "" 
$clientsec = "" | ConvertTo-SecureString -AsPlainText -Force # 
 
$credential = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $applicationId, $clientsec 
Connect-PowerBIServiceAccount -ServicePrincipal -Credential $credential -TenantId "" 
  
 
$workspacename="PowerBI_CICD_PROD" 
$datasetname="AdventureReports" 
##Getworksapce 
 
$workspace =Get-PowerBIWorkspace -Name $workspacename 
 
# GetDataSets 
$DatasetResponse=Invoke-PowerBIRestMethod -Url "groups/$($workspace.id)/datasets" -Method Get | ConvertFrom-Json 
 
 
# Get DataSet 
$datasets = $DatasetResponse.value 
 
     foreach($dataset in $datasets){ 
                if($dataset.name -eq $datasetname){ 
                $datasetid= $dataset.id; 
                break; 
                } 
 
            } 
 
## Take Over DataSet 
 
Invoke-PowerBIRestMethod -Url "groups/$($workspace.id)/datasets/$($datasetid)/Default.TakeOver" -Method Post

     

    • dom99's avatar
      dom99
      Advocate V
      6 years ago

      Jayendran Hi, thanks for the response.

       

      Great thank you thats exactly what I needed. I will try it out shortly 🙂

    • dom99's avatar
      dom99
      Advocate V
      6 years ago

      Hi Jayendran 

       

      I've tried your script but unfortunatly the method below fails.

       

      Invoke-PowerBIRestMethod

       

       I successfully log in as the service principal and assign the values as required, the script works up until the very end.

       

      The error message is:

      Invoke-PowerBIRestMethod : One or more errors occurred.
      At line:3 char:1
      + Invoke-PowerBIRestMethod -Url "groups/$($workspace.id)/datasets/$($da ...
      + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      + CategoryInfo : WriteError: (Microsoft.Power...werBIRestMethod:InvokePowerBIRestMethod) [Invoke-PowerBIR
      estMethod], AggregateException
      + FullyQualifiedErrorId : One or more errors occurred.,Microsoft.PowerBI.Commands.Profile.InvokePowerBIRestMethod

       

      Can you help with finding out why its not working? I found your powershell scripts you'd uploaded, very handy to have thank you.

      • Jayendran's avatar
        Jayendran
        Solution Sage
        6 years ago

        Hi dom99 ,

         

        • Make sure that SPN have admin access to your Workspace.
        • Make sure the workspace id ,datasetid are properly passing to the script 

         

        After you got the error run the below script

         

        Resolve-PowerBIError

        Which will gives you the exact error

         

  • tackytechtom's avatar
    tackytechtom
    Most Valuable Professional
    4 years ago

    Hiya!

     

    Although I am pretty late to this party here, I still wanted to distribute two blog posts that are very much related to this topic. So, in case someone finds him/herself in the situation where a service principal needs to own the power bi dataset, I hope you find any of the following helpful.

     

    Blog Post A: 

    https://www.tackytech.blog/how-to-make-a-service-principal-the-owner-of-a-power-bi-dataset/

    A walkthrough on how to take over a dataset by a service principal via an Azure DevOps pipeline. Likewise to the accepted answer in this thread here, the core is also a Powershell script that can be used outside an Azure DevOps pipeline as well.

     

    Blog Post B: 

    https://www.tackytech.blog/how-to-retrieve-oauth2-access-tokens-for-data-sources-via-data-factory-to-refresh-power-bi-dataset/

    An ETL flow in Azure Data Factory where the data factory is responsible for updating the oauth2 token for all data sources in the power bi dataset prior to kickstarting the dataset refresh (via managed identity). Here, a prerequesite is that the dataset is owned by a service principal.

     

    Once again, I hope this is helping! 🙂

     

    /Tom
    https://www.tackytech.blog/
    https://www.instagram.com/tackytechtom/