Service account - PowerBINotAuthorizedException

[mehuljain]

Hi,
We have created a power Automated flow. In those flows are using power BI connectors to get the data from power BI reports. We have written a dax query and created a connection using workspace ID and Dataset ID it is working fine.  

We are trying to create a connection using service account, but it is giving us the error - 'PowerBINotAuthorizedException'

How can we access it using Service account?

[v-echaithra]

Hi @mehuljain ,

We wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?
If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

Regards,
Chaithra.

[v-echaithra]

Hi @mehuljain ,

May I ask if you have gotten this issue resolved?

If it is solved, please mark the helpful reply or share your solution and accept it as solution, it will be helpful for other members of the community who have similar problems as yours to solve it faster.

Regards,
Chaithra.

[v-echaithra]

Hi @mehuljain ,

As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?
If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

Regards,
Chaithra.

[mehuljain]

Hi, Thanks for your suggestion. 

As of now, it is not working with service accout. 

We haven't tried it for service percipal as our environment will not allow http calls. 

Thanks

[v-echaithra]

Hi @mehuljain ,

Thanks for the update.

Make sure the service account has an active Power BI Pro license.

Add Service Account to the Workspace, ensure the service account is a member or contributor.

Ensure the service account has "Build" permission on the dataset.

Sign in to Power BI Connector in Power Automate. In Power Automate: Open Data > Connections.

Find the Power BI connector and edit/re-authenticate it using the service account's credentials.

Manually test access in Power BI service by Loging into https://app.powerbi.com using the service account. Try opening the dataset or report manually. If access is denied here too, it's not a Power automate issue, it’s a permission problem in Power BI.

If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

Regards,
Chaithra.

[mehuljain]

Thanks for your response. I tried logging in using my service account manually into msit.powerbi.com but i am getting below error 
Your sign-in was successful but does not meet the criteria to access this resource. For example, you might be signing in from a browser, app, or location that is restricted by your admin.

[v-echaithra]

Hi @mehuljain ,

This issue arises when admin access has not been assigned to your application in the Power BI workspace, leading to the PowerBINotAuthorizedException error.

Follow the below steps to fix the issue:

Navigate back to the Home page. Click on the Workspaces tab from the left pane and then select your workspace from the list.
Choose the Manage Access option in the navbar.
When you click on Manage Access, you will be presented with a screen showing the current users and security groups having access to the workspace.
You can then click on Add people or groups so as to provide access.
After that, you will need to select Admin from the dropdown and add the user according to your requirements.
Now access for the workspace configuration is completed, select the report that you want to embed in a WordPress page or post.

Please refer to link below to learn more about how to troubleshoting a flow and see if your problem could be solved: Troubleshoot a cloud flow - Power Automate | Microsoft Learn

This error "Your sign-in was successful but does not meet the criteria to access this resource" is usually due to some Conditional Access policy. In some cases, there may be certain account or system restrictions such as preinstalled certificates, token usb key, geographical location, etc... that will be needed to log in. The suggestion is to check with the administrator, for reference you can read the next article: Troubleshooting sign-in problems with Conditional Access - Microsoft Entra ID | Microsoft Learn

I hope this helps you.
Best Regards,
Chaithra E.

[mehuljain]

our service accout was already added as admin to that workspace.

[v-echaithra]

Hi @mehuljain ,

Thank you for confirming that the service account is already added as an admin to the workspace. Since the issue seems to persist despite having the correct permissions, and considering the error message suggests a possible Conditional Access or policy restriction, we recommend raising a support ticket with Microsoft for further assistance.

You can submit a ticket through the Microsoft Power BI Support Portal:
How to create a Fabric and Power BI Support ticket - Power BI | Microsoft Learn

Best Regards,
Chaithra E.

[v-echaithra]

Hi @mehuljain ,

We wanted to check whether the issue has been resolved with the help of our support team. If it has, we kindly ask you to share the solution here and mark it as the accepted answer so that other users can benefit as well.

If you still have any questions or need further assistance, please don’t hesitate to let us know. We’re more than happy to continue supporting you.

Thank you for your patience. We look forward to hearing from you.

Best regards,
Chaithra E.

[v-echaithra]

Hi @mehuljain ,

We wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?
If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

Regards,
Chaithra.

[v-echaithra]

Hi @mehuljain ,

Thank you for reaching out to Microsoft Community.

Check whether Power BI Tenant Settings is Configured to enable Service Principals to use API's.
if the app that you create for your service principal authentication has any Power BI permissions assigned to it then the access token that is generated (when passed to Power BI REST Admin API) will return an error response that reports PowerBINotAuthorizedException.
To be even more specific, if the access token that you pass to the Power BI API has a roles key/value pair, then you will get a PowerBINotAuthorizedException.
In Power BI, service principals need to be explicitly allowed to use APIs. Check your Power BI tenant settings and verify that service principals are enabled for API access.
If you've enabled service principal access, make sure the service account is part of the security group that has API permissions.
If your Azure app has Power BI permissions assigned to it, this can sometimes cause authorization issues. Try removing unnecessary Power BI permissions from the app and test again.
Ensure that the access token generated for the service account is valid and correctly formatted when making API requests.

Assign Power BI Pro license to the service account
Add the service account to the Power BI workspace (Member or Contributor).
Grant Build permissions to the dataset
Sign into Power BI connector in Power Automate as the service account
Use the "Run a query against a dataset" action with proper Dataset ID & Workspace ID

Reference: Enable service principal authentication for admin APIs - Microsoft Fabric | Microsoft Learn

If this post helps, please give us Kudos and consider marking it Accept as solution to assist other members in finding it more easily.

Regards,
Chaithra.

[wardy912]

@mehuljain the error your receiving refers to the account not having the necessary permissions to access the BI dataset. Please ensure that your service account is a workspace admin for the workspace that contains the dataset.