Forum Discussion
"Insufficient permissions" while saving changes to semantic model via TOM (Tabular Object Model)
- 1 year ago
Hi Anonymous ,
Check with your Power BI / Fabric Administrator whether new security or governance policies were applied recently.
If you’re using service principals or automation to save semantic models, new consent and security checks may now block saving unless explicitly approved in the tenant settings.
Check in the Power BI Admin Portal if you have access:
Go to Admin Portal > Tenant settings > Export and sharing settings
Look under: “Publish datasets”, “Allow semantic model editing”, etc.
Create or edit a new test model in the same workspace. If that works, the issue is likely dataset-specific permission or ownership, not workspace-wide.If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.
Regards,
Chaithra.
Hii Anonymous ,
Check Permissions via REST API
GET https://api.powerbi.com/v1.0/myorg/datasets/{datasetId}/datasources
Ensure the service principal has access to all listed data sources.
Even though the service principal has admin access on the SQL database, check if it has Use permissions on the connection within Power BI.
Go to Manage Gateway & Data Sources in Power BI and verify access.
Row-level security (RLS) might also affect the ability of users with read or build permission on a semantic model to read data from the semantic model.
Thanks and Regards,
Chaithra.
Hi v-echaithra ,
Thanks for your input.
Using the mentioned API, we are able to retrieve the datasourceId, but it doesn't provide visibility into the permissions applied to the dataset or the specific data source permissions for the service principal.
In our current scenario, RLS is not applied on the dataset we're working with.
Let me know if there's an alternate way to programmatically validate the service principal’s permissions on the dataset/data source.
Best regards,
Himanshu