Unauthorized (401) Embedded using the samples Node and .NET

[dpiret]

Hi there.

When running the examples of embedded for your customers applications (both Node and .NET, I get this error (/getEmbedToken)

Status: Unauthorized (401)
Response: {"error":{"code":"PowerBINotAuthorizedException","pbi.error":{"code":"PowerBINotAuthorizedException","parameters":{},"details":[],"exceptionCulprit":1}}}
RequestId: fe5ca8dd-a49e-41b0-8f08-**********

- The report I embedded is visible from Power BI service (app.powerbi.com)

I have tried:

- Made sure config.json and web.config have the right information (clientId, reportId, tenantId, etc)

- The authenticationMode is ServicePrincipal, and I'm using the credentials of the Global Admin (same user that created the dataset, report, has all permissions, is App Registration Owner, etc.)

-  All permissions granted on Power BI REST APIs on the App Registration

- Workspace access is enabled

- I'm using a Pro trial and have not used any developer tokens yet ("usage": 0)

- The dataset is not requiring effective identity ("isEffectiveIdentityRequired": false)

Has anyone any clue of what else to check? 

Thanks!

[dpiret · Accepted solution]

I found the problem. In case this happens to anybody, here's the solution:

The problem was in Step 7 - Enable workspace access that states Sign in to Power BI service > workspace you want to enable > Workspace access > Access pane, > copy the service principal to the Enter email address text box.

Because the email of the global admin was already filled out, I overlooked the actual requirement of entering the service principal ("Enter email address" was confusing).

The name of the service principal is the Display Name of the Azure AD app, as it appears in the Azure AD app's overview tab. This could also be a security group if you defined any.

[v-xulin-mstf]

Hi @dpiret

Please refer to the links.

Troubleshoot your embedded application 

How to Fix a 401 Unauthorized Error 

Hope it helps!

If you still have some question, please don't hesitate to let me known.‌‌

Best Regards,

Link

Is that the answer you're looking for? If this post helps, then please consider Accept it as the solution. Really appreciate!