"Access to the resource is forbidden." when getting data from Azure Resource Graph via PowerBI

[FFX_Jane]

I'm using the Azure Resource Graph (ARG) connector in PowerBI Desktop. The query "Resources | take 5" works fine in the Azure Portal's ARG Explorer, but in PowerBI, I get an 'Access to the resource is forbidden' error. My colleague (global admin) can run it successfully in PowerBI. I have full read permissions and can query in the Azure Portal, but not in PowerBI. Any suggestions for troubleshooting? Are there additional Azure roles I need?

[v-tsaipranay]

Hi @FFX_Jane ,

Thank you for reaching out to the Microsoft Fabric Community. Also thank you @Akash_Varuna  for providing your inputs as he menation to access Azure Resource Graph, you must have either: Resource Graph Reader role or Reader role at the subscription or management group level. Neither Reports Reader nor Global Reader grants permissions to query Azure Resource Graph.

Please refer to the documentation below for detailed information:

Overview of Azure Resource Graph - Azure Resource Graph | Microsoft Learn

If this post helps, then please give us Kudos and consider Accept it as a solution to help the other members find it more quickly.

Thank you.

[FFX_Jane]

Thank you for your response. Our global admin could not find "Resource Graph Reader" role listed. Can you be a Why global reader wouldnt' give the permissions?

[v-tsaipranay]

Hello @FFX_Jane ,

Thank you for your response. The Resource Graph Reader role exists, but it might not always show up in the Azure portal. Instead, assigning the Reader role at the subscription or management group level will give the right permissions to access Azure Resource Graph. If needed, it can also be added using Azure CLI. As for the Global Reader role, it only gives read access to Azure AD-related data (like users and groups) and does not include permissions for Azure Resource Graph. Since ARG access is managed through Azure RBAC, users need either the Reader or Resource Graph Reader role at the right level to run queries.

If this post helps, then please give us Kudos and consider Accept it as a solution to help the other members find it more quickly.

Thank you.

[FFX_Jane · Accepted solution]

Thank you v-tsaipranay. I tried with Resource Policy Contributer role assigned which includes ARG reader role, still did not work. After I upgrade PowerBI from 2.136 to 2.140, the same query works. Looks like it is a PowerBI issue even though on the MS website (PowerBI Connector)  , it says any version after 2.123 should work.

[FFX_Jane]

@Akash_Varuna Thank you for your response. I have "Reports Reader" and "Global Reader" role enabled. Do any of these two covers "Resource Graph Reader"?

[Akash_Varuna]

@FFX_Jane I think no .... You would need Reader or Resource Graph Reader role at the subscription or management
For more details please check the documentation
Overview of Azure Resource Graph - Azure Resource Graph | Microsoft Learn
If this post helped please do give a kudos and accept this as a solution
Thanks In Advance

[Akash_Varuna]

Hi @FFX_Jane I think You need the Reader or Resource Graph Reader role at the subscription or management for this