Failed to update data source credentials where I'm unable to setup scheduled refresh

[mm123]

Hello all, I have been having an issue in PowerBI Service where I am unable to set up a scheduled refresh.

The .pbix file is stored on SharePoint and data source is Azure blob store, where I used Org Auth credentials in the data source permissions to fetch data. It works perfectly fine on the PowerBI desktop but when I publish it to a workspace, and try to set up a scheduled refresh, it says - Failed to update data source credentials: The credentials provided for the AzureBlobs source are invalid.

I used the same org auth credentials (as in the PowerBI desktop in the data source settings) yet for some reason, it does not pick up and recognize the data source credentials. I even tried using a SAS token approach - first modified the permissions on the desktop version, published it and used the same SAS token on the web-version, yet the same error message.

Clearing cache, deleting the files on workspace and republishing did not help either. Apologies if this question was already posted and answered, I checked the forums and found some solutions but none of them seem to work in my case. Any help would be highly appreciated.

Thanks,
MM

[GreeshmaN]

Hi @mm123 

As @arvindsingh802  mentioned either you can use gateway or if you want to connect directly to cloud without using gateway.
Please verify the below things:
1.Configuration in PBI Service: Choose the appropriate authentication method
OAuth2: If using Azure Active Directory, sign in with the same Azure account used in Power BI Desktop.
2. Check Azure Blob Storage Firewall Settings:
If the Blob Storage is secured with a firewall. Ensure Power BI Service IP ranges are allowed in the Storage Account's Networking > Firewalls and Virtual Networks section.
(Alternatively, you can try enabling the "Allow trusted Microsoft services to access this storage account" option.)
3.Dataset Permissions
Ensure that the account you use for OAuth or access key authentication has at least read/list permissions on the Blob container. If using a Service Principal, assign it the Storage Blob Data Reader role in Azure RBAC.

If this answer has solved your issue, please mark it as accepted solution.

Thank you

[arvindsingh802]

It look like IP ristriction has been configured to decline connection comming outside your org network
You can go by either route

1. Install Power BI Gateway in your prg network and create connection in that

2. Connect with your IT team to allow Power BI IP range in your Azure system

[mm123]

Thank you for your reply! I used the org credentials across the tools - Azure blob as well as Power BI, and ours is a M365 account. So ideally it should work, isn't it?

Would you please elaborate a bit further on the recommendations you've shared? Thanks

[arvindsingh802]

For added security when IP ristriction is enabled, no communication apart from allowed IP range is allowed even if that is Microsoft product.
To enable the communication you can connect to IT team or if you have access you can enable from Blob settings as mentioned by @GreeshmaN