Forum Discussion

_onto_'s avatar
_onto_
Helper I
3 years ago

power bi rest api - execute query against dataset

Hi,

 

I have a scenario where user enquires about using the Power BI REST API to query dataset data (via Power Automate). The dataset in question is deployed via an app with build permissions enabled. No permissions are managed at workspace level. My expectation was that this should be anough. Apparently it isn't.

 

So my question is twofold:

1. what is the rationale of not (apparently) allowing users to run REST API dataset queries against datasets for which they have build permissions, particularly since they can run such queries via XMLA
2. Is there a clean way of accomplishing this without resorting to workspace level permissions?

 

Thank you!

6 Replies

  • My expectation was that this should be anough. Apparently it isn't.

    It definitely is.  Has the user "installed" the app?  That is a one-time activity they must do before they can consume the XMLA endpoint.

    • _onto_'s avatar
      _onto_
      Helper I

      They are specifically enquiring about the REST API.  The point I am raising is to do with users with build permissions (via app) not being able to cosume the REST endpoints. Particularly when one reads articles such as this one (and the emphasis on self service) and then it turns out things might not be as rosy.

       

      So far:

      - does not appear to be possible for users without workspace permissions to consume the REST endpoints but I cannot seem to find this clearly documented

      - going the workspace permissions route defeats the whole point of having security defined at dataset level, the individual control over access to the different datasets that may exist in the same workspace, audiences and all of that

       

      Hope I'm wrong about this.

      • lbendlin's avatar
        lbendlin
        Super User

        Can your user use Analyze in Excel? Can they use DAX Studio? SSMS? 

         

        All of these work in our environment, for users that definitely do not have workspace access.