Forum Discussion
Set build permission on dataset/semantic model to app using REST API
Hi KimTutein , Thank you for reaching out to the Microsoft Fabric Community Forum.
You are correct, an Azure AD app registration is a service principal and service principals are valid principals in the Put Dataset User API. In theory you should be able to grant ReadExplore (Build) that way.
The issue is that, in practice, assigning Build to a service principal through the REST API doesn’t actually work consistently today, even though the UI supports it. This is why you’re able to add Build permission for your app in the GUI, but the same call through the API won’t succeed. It’s a limitation in the current implementation, not something you’re doing wrong.
Hi v-hashadapu
I am not sure of what you mean. I have made an app registration in Azure AD. which in my view is a service principle. I can add my app in the UI og via. Rest API with read access on the workspace. I then need to add build permission. This I can do in the GUI (and then it will work) - however I cannot get it to work with Rest API
Hi KimTutein , Thank you for reaching out to the Microsoft Fabric Community Forum.
You are correct, an Azure AD app registration is a service principal and service principals are valid principals in the Put Dataset User API. In theory you should be able to grant ReadExplore (Build) that way.
The issue is that, in practice, assigning Build to a service principal through the REST API doesn’t actually work consistently today, even though the UI supports it. This is why you’re able to add Build permission for your app in the GUI, but the same call through the API won’t succeed. It’s a limitation in the current implementation, not something you’re doing wrong.