I have developed and published an AI Skill to an API endpoint. I'm attempting to access this endpoint from an App Service, but I’m running into an authorization issue.
When accessing the endpoint from my local environment, I can generate a bearer token using the scope https://analysis.windows.net/powerbi/api/user_impersonation through Azure CLI (since I’m logged in locally). However, when I deploy this to App Service, the token generation fails.
- The App Service’s managed identity does have access to the Fabric workspace.
- Despite this, I receive an "insufficient permissions" error during deployment.
- The issue seems to be that user_impersonation is not available under Power BI Service API permissions when configuring API permissions in the App Registration.
I'm looking for a way to:
- Generate a valid token in the App Service to authorize the AI Skill.
- Implement a backend or frontend method to create this token and authenticate with the AI endpoint.
Is there a known workaround or a specific configuration that allows generating this token for the App Service environment?
