Change Deployment Pipeline Owner

[wanwar]

We have a deployment pipeline that was created/owned by an employee who is no longer with the co. I am using below API to change the owner :

https://api.powerbi.com/v1.0/myorg/Pipelines/{pipeline ID}/users

with body:

{
  "identifier": "my email address",
  "accessRight": "Admin",
  "principalType": "User"
}

Using a service account with access to: Pipeline.Read.All Pipeline.ReadWrite.All

but i keep getting:

{
    "error": {
        "code": "ALM_InvalidRequest_AccessToPipelineDenied",
        "pbi.error": {
            "code": "ALM_InvalidRequest_AccessToPipelineDenied",
            "parameters": {},
            "details": [],
            "exceptionCulprit": 1
        }
    }
}

Nobody can see that pipeline except when I look at that pipeline in Postman through: https://api.powerbi.com/v1.0/myorg/admin/groups/{workspace ID}/users

Below options are enabled and account is added to: Service principals can use Fabric APIs Service principals can access read-only admin APIs Service principals can access admin APIs used for updates

What am i missing?

Thanks,

[Deku]

Try using the admin version.

https://learn.microsoft.com/en-us/rest/api/power-bi/admin/pipelines-update-user-as-admin

[wanwar]

Getting similar 401 error as that endpoint requires Tenant.ReadWrite.All permission which is not available to us

[Deku]

If you need to use the non admin version make sure the SVP has contributor rights or higher in the target worksapce

[wanwar]

There are 3 workspaces in the pipeline and SVP is Admin in all 3 of them

[Deku]

Are you not able to add yourself as admin of the workspaces? That would allow you to see the pipeline. If not you either need a fabric admin or get the tenant.readwrite for the service Principal to run the admin API

[wanwar]

We have 3 Fabric admins including myself and all of us are listed as Admin of Workspaces, but we dont see that pipeline in Fabric UI, so cant change it from there, my question is if our SVP is Admin in workspaces involved why I cannot use non-admin API to change the owner, 2nd if we are Fabric Admins why we dont see that pipeline ?

[Deku · Accepted solution]

Fabric admin role doesn't give you permissions on any workspaces or artifacts in the tenant.

But since you are admin you should still be able to run the admin version yourself. You can quickly run it from the power bi API reference site by selection the green try me button on the API definition and it will handle authentication and everything

Not sure about the SVP part, assume because pipeline exists outside of workspace scope. Ive only ever tried with the admin version, with a SVP

[wanwar]

As i said I have added SVP to all 3 workspaces in question as Admin, thats what i am using to the run API call