Forum Discussion
ServicePrincipalIsNotAllowedByTenantAdminSwitch on Pro capacity
Hello hhout ,
This is purely a tenant permission issue for the service principal (SP). Even if the SP is added as an admin or member of a Pro workspace, it cannot use the APIs unless the tenant admin has enabled the “Allow service principals” setting and (if scoped) included the SP’s security group.
Could you check if this setting is enabled:
Power BI Admin Portal -> Tenant Settings -> Allow service principals to use Power BI APIs
If it’s enabled but only scoped to certain security groups, make sure the service principal calling the API is included.
If this solved your issue, please mark it as the accepted solution. ✅
Hello hhout ,
This is purely a tenant permission issue for the service principal (SP). Even if the SP is added as an admin or member of a Pro workspace, it cannot use the APIs unless the tenant admin has enabled the “Allow service principals” setting and (if scoped) included the SP’s security group.
Could you check if this setting is enabled:
Power BI Admin Portal -> Tenant Settings -> Allow service principals to use Power BI APIs
If it’s enabled but only scoped to certain security groups, make sure the service principal calling the API is included.
If this solved your issue, please mark it as the accepted solution. ✅
Hi, you are correct. After raising some additional questions and searching the Security Groups I found out this setup was in use. After adding the Service Principal as a member in the Azure Security Group it works so I can confirm that triggering a standard refresh on a specified (semantic model) dataset in a Pro workspace works. Thanks for the guidance on this topic!
