Forum Discussion

joshuatoon's avatar
joshuatoon
New Member
9 years ago

Azure PIM Breaks Scheduled Refresh

I'm using the O365 Adoption Content Pack as well as Azure PIM. The scheduled refresh of data fails if you aren't always in the global admin role. Using Azure PIM my account is removed from that role ...
Content Packs
v-haibl-msft's avatar
v-haibl-msft
Microsoft Employee
9 years ago

joshuatoon

 

This should be a limiation in such scenario. The O365 Adoption content pack needs admin permission, but Azure PIM will remove the permission after a timeout period. Then the refresh will be failed because of not enough permission.

Both products are working as expected in their way. If Power BI schedule refresh can trigger the role activation in Azure PIM, that would be perfect.

 

Best Regards,
Herbert

joshuatoon's avatar
joshuatoon
New Member
9 years ago

Why does the content pack need to refresh as the user? Why can't it be registered as an application in the directory that has permissions directly assigned?  In that scenario, the user doesn't need admin permissions all the time, they only need to be able to consent to giving the application permission one time. That's how everything else works with the Graph API.