Forum Discussion

zuheirashraf17's avatar
zuheirashraf17
Advocate II
5 years ago

Service Principal Account to Access Dataflow

Dear Experts,

 

So I just recently built CICD Automation process for our team via Azure Devops. Its all works fine until some of the reports started to use dataflows as its main source.

 

Whenever the Principal Account took over the dataset (containing Azure SQL and Dataflow) as the connections, it lost the credentials and unable to continue with its automated Schedule refresh.

 

So my question is, is it possible to allow dataflows read access to the service principal account?

Here is what I've done without success;

  • Gave principal account to the Dataflow's Workspace admin access
  • Gave principal account security group to the Dataflow's Workspace admin access
  • Tried to take over dataflow with principal account (I thought could do this with API but it failed)

 

I look up into some of the limitations on principal account, it does mention of the following;

  • Dataflows management is not supported. 

 

I'm not sure if this is applied to my case, its not really trying to manage anything, its simply to allow access to the dataset to refresh, that's all. 

 

Relevant screenshot as below;

 Dataset configured by Principal Account

 

If the dataflow (2nd Source) is removed from Report, it able to get the credentials just fine since the first source is from Azure SQL DB.

 

Any help and suggestions is highly appreciated.

 

Regard,

Zuheir

Dataflow
Need Help

3 Replies

  • RJ251997's avatar
    RJ251997
    Helper I
    5 years ago

    Hi 

     

    you can follwe this step to solve this probelms .

     

    Sign into the Azure portal as a Global Administrator, an Application Administrator, or a Cloud Application Administrator.

    Thank & Regards 

    rohit

    • zuheirashraf17's avatar
      zuheirashraf17
      Advocate II
      5 years ago

      Hi Rohit,

      thanks for the info. May I know if the 2nd image coming from Power BI Tenant level setting or at capacity settings?

       

      I don't have the administration access, might need to request it for our uses. So I might need as detail information as I can before proceed for the request.

       

      Thanks

  • zuheirashraf17's avatar
    zuheirashraf17
    Advocate II
    5 years ago

    I still couldn't find any answers to this issue. Previous suggestion from Rohit concerns tenant Admins as it allows the security group to read the whole tenants directory as admin via API. This is not allowed as it may contain user data. -Thus our request was denied, and couldn't even start with the testing. 

     

    Appreciate it if there is another way to do it.