A Service Principal can currently refresh a semantic model with the following POST, requiring Dataset.ReadWrite.All permissions.
Datasets - Refresh Dataset In Group - REST API (Power BI Power BI REST APIs) | Microsoft Learn
I would like a permission for "Refresh", allowing that same API call without the security risks of granting "ReadWrite".
This would make it easier to pull data as it becomes available without making fragile dependencies on schedule timing. e.g. from SQL Agent Jobs, Task Scheduler, cron.
The equivalent Fabric API call does not yet exist, but if it gets added some day the same would apply.
2 Comments
- Hi! Since you use the API, did you manage to export paginated reports through the API with semantic models? I was trying to test it in my environment and we could never do it. In fact, Microsoft support mentioned that there was a restriction in the product that does not allow it. Please tell me about your experience.
- aboterba Here's the link to download RDL - https://learn.microsoft.com/en-us/rest/api/power-bi/reports/export-report If there's some limitation on that API or similar fabric/reportingservicestools API calls, please investigate it separately rather than posting on this thread. This thread is specifically about being able to grant a permission to refresh existing models without unintentionally granting edit permissions.
