Forum Discussion
Power BI workspace creation using API
HI jaineshp
We have achieved the target.
Please note that Power BI roles renamed to Fabric.
https://powerbi.microsoft.com/en-us/blog/power-bi-administrator-role-will-be-renamed-to-fabric-administrator/
Steps performed is
1. Workload identity configuration in AKS cluster2. Assign Fabric Administrator role
3. Tenant Setting Location
The setting "Allow service principals to use Power BI APIs" is found at:
- Power BI Admin Portal → Tenant settings → Developer settings
- Look for "Allow service principals to use Power BI APIs"
4. Add UAMI to capacity group in azure
Thank you all..
Hey Koteswara,
Let me clarify the same.
1. Power BI Service Administrator Role
This is not an Azure AD role but a Power BI-specific admin role. Your IT team needs to:
- Go to Microsoft 365 Admin Center → Roles → Role assignments
- Look for Power BI Administrator (not "Power BI Service Administrator")
- Or assign Global Administrator which includes Power BI admin rights
2. Tenant Setting Location
The setting "Allow service principals to use Power BI APIs" is found at:
- Power BI Admin Portal → Tenant settings → Developer settings
- Look for "Allow service principals to use Power BI APIs"
- This must be enabled and the UAMI should be added to the security group allowed to use this setting
3. Alternative Approach - API Permissions
Instead of Power BI admin role, you can assign Microsoft Graph API permissions to the UAMI:
Required API Permissions:
- Tenant.Read.All (for reading tenant info)
- Dataset.ReadWrite.All (for dataset operations)
- Dashboard.ReadWrite.All (for dashboard operations)
- Report.ReadWrite.All (for report operations)
Did it work? ✔ Give a Kudo • Mark as Solution – help others too!
Best regards,
Jainesh Poojara / Power BI Developer
Hi jaineshp
Alternative Approach that you provided using Graph API permission,
if i'm correct are you looking for the Azure - app registration service with Microsoft Graph api access ?
Our UAMI will not display in this app registration list right
Hey Koteswara,
You're absolutely correct!
User-Assigned Managed Identities (UAMI) do NOT appear in App Registrations - this is a key distinction that many people get confused about.
Here's the clarification:
UAMI vs App Registration
- UAMI = Azure resource, appears in Azure Portal → Managed Identities
- App Registration = Azure AD application, appears in Azure Portal → App Registrations
For Power BI API Access with UAMI, you have 2 options:
Option 1: Power BI Admin Portal (Recommended)
- Enable "Allow service principals to use Power BI APIs" in Power BI Admin Portal
- Add your UAMI to the security group that's allowed to use this setting
- This is the native Power BI way and doesn't require Graph API permissions
Option 2: If you need Graph API approach
You would need to:
- Create an App Registration (separate from UAMI)
- Grant Microsoft Graph API permissions to this App Registration
- Use client credentials flow with this App Registration
Bottom Line
For your UAMI to work with Power BI APIs, stick with Option 1 - the Power BI Admin Portal tenant setting.
The Graph API permissions I mentioned earlier would only apply if you were using an App Registration instead of a UAMI.
Thanks for catching that important distinction! 👍
Did it work? ✔ Give a Kudo • Mark as Solution – help others too!
Best regards,
Jainesh Poojara / Power BI Developer
