What App permissions are needed for regular Power BI REST API?

[cwollett]

I have an app registered in Azure with no Power BI permissions as some of the Admin APIs insinuate you need not have any added for it to work. I do have it added in the appropriate places within the Power BI tenant settings and have been successfully using the Admin APIs for a few years now to get activity/inventory information.

I want to extend my API usage to using non-Admin APIs, namely:

• Get Gateways (https://learn.microsoft.com/en-us/rest/api/power-bi/gateways/get-gateways)
• Refresh Dataset (https://learn.microsoft.com/en-us/rest/api/power-bi/datasets/refresh-dataset)

This leads me to a series of questions:

• Required scope is Dataset.ReadWrite.All - do I grant that to the app I already have?
• Will granting that scope break my ability to use the Admin APIs on this same SP?
• The Gateways endpoints insinuate the user must be a gateway admin - I have tried authenticating with the app as myself, but have not been able to successfully do so on an account using MFA
  • If anyone has a python script snippet of the correct MSAL path to use to authenticate an app as a user with MFA, would that override the other issues since I'm an admin and should have permissions across the board?

[v-rzhou-msft · Accepted solution]

Hi @cwollett ,

According to your statement, I think your issue is about grant permission to application.

As far as I know, you need to make sure that your account has permission to the feature you call like you need gateway admin permission to call "Get Gateways" REST API and your application needs to have permission that meet the required scope.

For reference:

Quickstart: Configure an app to access a web API - Microsoft identity platform | Microsoft Learn

Best Regards,
Rico Zhou

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.