Forum Discussion

bhavya11's avatar
bhavya11
Regular Visitor
1 year ago
Solved

Is it possible to export Paginated Report from Logic App enforcing Row Level Security

Hello, I am trying to export a Paginated Report (Power BI) from Azure Logic App. I am using the Export To File for Paginated Reports Logic App Action for this. I am able to export the report without...
Need Help
  • bhavya11's avatar
    bhavya11
    1 year ago

    Hello Sai,

    Apologies for the delayed response. The above solution did not work. The following combination is not supported by Power BI:

    Exporting Paginated Report with PBI Semantic Model enforcing RLS.

     

    To implement RLS, we need to pass custom string in Effective Identity's username key. E.g "state" (If I want to restrict data only to particular state for the logged in person).

    I get an error "User was not found in organisation.

     

    Basically, the REST API endpoint goes to check for that user in the Azure AD.

    But I have implemented RLS in an alternate way.

     

    Thank you.

bhavya11's avatar
bhavya11
Regular Visitor
1 year ago

Hello,

I tried the above, but I get 403 error.

I authenticate using Service Principal and then pass the oAuth token as bearer token to get the Embed Token for the PBI.

While calling the GetToken PBI Rest API, I pass the required filters as username in the payload along with other required fields:

POST https://api.powerbi.com/v1.0/myorg/GenerateToken

{
  "datasets": [
    {
      "id": "{dataset-guid}",
      "xmlaPermissions": "ReadOnly"
    }
  ],
  "reports": [
    {
      "id": "{report-guid}"
    }
  ],
  "identities": [
    {
      "username": "84170958",
      "datasets": [
        "{dataset-guid}"
      ]
    },
    {
      "username": "84170958",
      "reports": [
        "report-guid}"
      ]
    }
  ]
}

I get 403 in response.

 

Thank you

v-saisrao-msft's avatar
v-saisrao-msft
Icon for Community Support rankCommunity Support
1 year ago

Hi bhavya11 
It looks like you're encountering a 403 error when calling the GetToken PBI Rest API. This error typically indicates an authorization issue. Here are some steps and considerations that might help you resolve this issue:

  • First ensure that the Service Principal has the necessary permissions to access the Power BI resources. You need to grant the required permissions to the Azure AD app associated with the Service Principal. This includes Power BI service delegated permissions. Also verify that you are using the correct OAuth 2.0 endpoint for token generation. Sometimes, using the OAuth 2.0 V1 endpoint can cause issues. Try using the OAuth 2.0 V2 endpoint instead.
  • Double-check the structure of the payload you are sending to the GetToken API. Ensure that all required fields are correctly specified and that there are no typos or missing fields and make sure you are calling the correct API endpoint and that the scope of the token includes the necessary permissions for the Power BI REST API.

Thank you.