Forum Discussion

noamo48's avatar
noamo48
Frequent Visitor
8 years ago

Trying to embed report in AppOwnsData sample report, getting 403 Forbidden error

I am trying to run the sample AppOwnsData project (https://github.com/Microsoft/PowerBI-Developer-Samples/tree/master/App%20Owns%20Data) and I have followed the directions to a tee. I created a native app in Azure AD and assigned the correct permissions. I've done everything as instructed but it is constantly failing to load a report/dashboard/tile no matter what I try.

 

I haven't been able to find any information online about my issue. This is the error I'm getting after clicking the "Embed Report" button in the sample web app:

 

Error

            Status: Forbidden (403)
Response: {"error":{"code":"InvalidRequest","message":"Only group admin can embed group content"}}
RequestId: feefb7c9-1da8-44ef-8361-ab489439d2ca
        

 

Why is this happening?

2 Replies

  • noamo48's avatar
    noamo48
    Frequent Visitor

    Well I ended up fixing it. Super unintuitive and clumsy that it's set up this way....but I had to add my workspace group's email address as a member in the workspace group. So for example my workspace group was named "PowerBIWorkspace" and I had to add "[email protected]" as a member in the workspace.

     

    Whoever coded and documented Power BI did a HORRIBLE job....

    • Eric_Zhang's avatar
      Eric_Zhang
      Microsoft Employee

      noamo48 wrote:

      Well I ended up fixing it. Super unintuitive and clumsy that it's set up this way....but I had to add my workspace group's email address as a member in the workspace group. So for example my workspace group was named "PowerBIWorkspace" and I had to add "[email protected]" as a member in the workspace.

       

      Whoever coded and documented Power BI did a HORRIBLE job....


      noamo48

      Thanks for your sharing. So you hardcoded the "[email protected]" as the account credential in the App owns data? If so, it doesn't have to be the group account, any admin member's account in that group can work.