Forum Discussion
DMTS_OAuthFailedToGetResourceIdError (English translation needed)
I have reached the end of the CSS case now as well. It turns out that a refresh token wasn't being renewed, possibly due to the SQL outage.
Based on the communication with the Power BI engineers, the error ... ("DMTS_OAuthFailedToGetResourceIdError") ... almost always appears to be due to a bug. The bug may be most severe in cases where the data source uses SSO features. So you may want to turn off any fancy / flakey features if you want to avoid the OAuth bugs.
As far as my attempt to get a translation of that error message, none is forthcoming. I'm guessing the reason is because it is almost always related to internal bugs, and it was never supposed to have been bubbled out or become visible to customers. I'm still pretty sure that "DMTS" means data management token service, and I'd guess it represents some sort of software component like a fragile micro-service of some kind.
In my case the error was happening in an azure-managed-vnet-gateway but it would not surprise me if similar bugs exist within the on-premise gateway as well. Here is a CSS explanation of the bug that was occuring in my azure gateway. This caused an extended outage that lasted for a full week!
"we have checked internally for the Root cause of the issue and found that there was a bug where an s2s token is not being passed when creating a VNet gateway client for discovering the Oauth Resources and also the Refresh token was not getting renewed due to which this issue has occurred.
This prevents customers from refreshing their reports that point to a VNet gateway."
Here is another brief follow-up related to the error message which is presented in Latin ("DMTS_OAuthFailedToGetResourceIdError").
The PG shared more information. They will not share any explanation about the "DMTS" service component. But they did say the OAuth bugs occur when transitioning from a PBI refresh token to a SQL Server access token. Here is the new language/explanation from the PG:
“For AAD SSO, the PBI internal service (DMTS) needs to obtain a OAuth resource ID (the resource is the sql server) in order to perform token exchange from a PBI user token to the SQL Server user token. This step is only performed if the dataset is configured for AAD SSO.”
I wish some of this explanation from the PG was provided in the error message itself. (It would allow customers to independently disable the SSO, perhaps). I also wish I was able to understand why it takes a full week to resolve an issue like this! Hopefully they will not have week-long outages after the gateway becomes GA in January.