How to access Dynamics CRM API from PowerBi using Client Id , Client secret and tenant Id using

[Harineeeeeeee]

Hi,

 I am trying to fetch data from Dynamics CRM API to fetch audit info 

https://community.dynamics.com/blogs/post/?postid=f40996bf-52a9-417c-8294-bf35b1f53a84 

Above is the blog I referred to get API Info, the sample API I used is as,

https://{orgname}.crm.dynamics.com/api/data/v9.2/audits

Also cross verified that audits logs are enabled the APi works perfect in Dynamics CRM but when I try using this APi in PowerBI which has service principal authentication method gives me error saying no access to target data source?

how to resolve this?

should we need to Enable Control user access to environments especially with security groups and licensee? 

please assist on how to consume Dynamics CRM API in PowerBI 

[v-saisrao-msft]

Hi @Harineeeeeeee 

Thanks for posting in the Microsoft forum community. 

As per your query about accessing Dynamics CRM API from PowerBi using Client Id, Client secret, and tenant Id. Here are some steps to resolve your issue: 

• Check API Permissions: 
  Ensure API permissions are correctly configured in Azure. 
  Register the app in Azure AD and grant it necessary API permissions to access Dynamics CRM API. 
•  Enable Control User Access: 
     Enable control user access to environments using security groups and licenses. 
     Create security groups, add members, and associate these groups with the environment for the correct access level. 
•   Use Correct Authentication Method: 
      Use the correct authentication method (service principal) with the required scope in the access token. 
      Verify the access token at jwt.io to ensure the "scp" (scope) section includes necessary permissions. 
•   Verify Licensing: 
      Ensure the service principle is properly configured in Azure AD and Dynamics 365 to authenticate and access data. 
•    Validate API Access: 
      Test the API using tools like Postman to confirm that the service principal can retrieve data. 
•    Power BI Configuration: 
      Configure the data source in Power BI to use the service principal authentication method. 
      Ensure the "Token Audience URI" matches the Dynamics CRM API endpoint. 

 If my response addressed your question, please mark my post as a solution to assist others. 
Additionally, if you find my response helpful, consider giving "Kudos". 

[lbendlin]

how did you register the app permission scope? delegated?

[Harineeeeeeee]

@lbendlin When you say app permission scope, is that in Dynamics CRM? 
if yes how to do that ?

[lbendlin]

No, in Azure, when you created the app that gave you the client ID and secret

[Harineeeeeeee]

Yes that gave me the client id and client secret and when I query data tables using dataverse for the same environment of dynamics crm using the service principal authentication it works only for the API it didn't work 

[lbendlin]

check the access token ( at jwt.io ) - most likely the "scp"  (scope) section is missing or incomplete.