Forum Discussion

cannoli's avatar
cannoli
Frequent Visitor
1 year ago
Solved

PowerBI App Access not working

Hi,

 

About a month ago, I granted a user access to view a PowerBI app I had published. I created an OAuth 2.0 connection in Connections and Gateways and then mapped that connection to my semantic model in the gateway and cloud settings of the semantic model. Additionally, I gave the user access to the semantic model and added them to my audience in the map settings. The user was able to view the app perfectly fine, but around 2 weeks later (middle of Nov 2024), they began to receive the error attached in the image. Does anyone know if there was an update released to cause this issue? I was pretty sure the user did not need access to the workspace, but maybe they do? I am trying to follow the POLP and want to ensure I am doing this the right way. Do they also need access to the report? and to the Lakehouse the data resides?

  • Anonymous's avatar
    Anonymous
    1 year ago

    Hi cannoli,

     

    Thank you for reaching out to Microsoft Fabric Community.


    The error message suggests that the user does not have the necessary permissions to access the data.
    Here’s the list to check access for:
    Workspace, Report, SQL, Lakehouse, OAuth

     

    Did I answer your question? Mark my post as a solution, this will help others!
    If my response(s) assisted you in any way, don't forget to give "Kudos"


    Regards,
    Vinay Pabbu

7 Replies

  • cannoli I can see the visuals are directly querying the DB. Is the datasource is in direct query mode ? If yes, it might be access level issue on the DB level. And also the user needs access to the report too. 

     

    Thanks,

    Jai

  • Anonymous's avatar
    Anonymous
    Not applicable

    Hi cannoli,

     

    Thank you for reaching out to Microsoft Fabric Community.


    The error message suggests that the user does not have the necessary permissions to access the data.
    Here’s the list to check access for:
    Workspace, Report, SQL, Lakehouse, OAuth

     

    Did I answer your question? Mark my post as a solution, this will help others!
    If my response(s) assisted you in any way, don't forget to give "Kudos"


    Regards,
    Vinay Pabbu

    • cannoli's avatar
      cannoli
      Frequent Visitor

      Hi Vinay,

       

      Thanks for the response. I have checked the Workspace, Report, SQL, Lakehouse, and OAuth permissions. If I give access to all of them, it works for the user, however, that doesn't necessarily mean we are following the principle of least privileges. Would you be able to tell me what is the minimum access that must be granted for the user to view the app? I understand they need access to OAuth, the report, and the semantic model, but do they really need access to the Lakehouse and workspace?

      • Anonymous's avatar
        Anonymous
        Not applicable

        Hi cannoli,

         

        Viewer access is enough to view the app, and Lakehouse and Workspace access are not necessary because the semantic model and dataset handle all data access, eliminating the need for direct Lakehouse access.

         

        Please let me know if you have any additional questions.

         

        Did I answer your question? Mark my post as a solution, this will help others!
        If my response(s) assisted you in any way, don't forget to give "Kudos"


        Regards,
        Vinay Pabbu

         

  • Anonymous's avatar
    Anonymous
    Not applicable

    Hi cannoli ,

     

    As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?
    If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

     

    Regards,

    Vinay Pabbu

    • Anonymous's avatar
      Anonymous
      Not applicable

      Hi @cannoli ,

       

      As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?
      If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

       

      Regards,

      Vinay Pabbu

      • Anonymous's avatar
        Anonymous
        Not applicable

        Hi cannoli

        May I ask if you have gotten this issue resolved?

        If it is solved, please mark the helpful reply or share your solution and accept it as solution, it will be helpful for other members of the community who have similar problems as yours to solve it faster.

         

        Regards,

        Vinay Pabbu