How to Schedule and Export PDF Reports with Dynamic Parameters for Multiple Sentinel Workspace IDs

Hi noob456 ,

Although the Logic App works correctly at the API level, the Power BI Service is rejecting the dataset refresh due to missing or unsupported credentials for the underlying data source. Since you've already registered a service principal in each tenant, it’s important to ensure that it has the required API permissions, including Dataset.ReadWrite.All, Report.Read.All, and Workspace.Read.All. Additionally, your service principal must have direct access to the data source (for example, SQL or Log Analytics), and the data source itself must be capable of accepting service principal tokens.

Make sure admin consent has been granted for the permissions in each Azure Active Directory (AAD) tenant. The service principal should also be added to the appropriate Power BI workspace as either an Admin or Member. Furthermore, confirm that the Power BI tenant setting “Allow service principals to use Power BI APIs” is enabled. This setting can be found in the Power BI Admin Portal under Tenant settings > Developer settings.

It’s also essential to verify that your dataset supports authentication via service principal. To do this, navigate to Power BI Service > Dataset > Settings > Data Source Credentials and check if the data source supports service principal authentication. For instance, services like Azure SQL Database or Azure Data Lake support OAuth2 and can work with service principals, but they must be configured explicitly for this type of authentication.

Finally, ensure that the setting under Datasets in the Power BI Admin Portal “Allow XMLA endpoint and Analyze in Excel with on-premises datasets” – is not configured in a way that blocks service principal access.

Hope this helps,
Best Regards,
Chaithra E.