workspace creation disabled on tenant level

[inkfleur]

Hi,

Am trying to create a PowerBI workspace using a python script. 
I have created an app registration in Azure and it has API permissions - Workspace.ReadWrite.All

I have also enabled Workspace creation in PowerBI Admin portal.

However, when I use this App registration(TenantID, ClientID, and ClientSecret) to authenticate and create workspace, it errors out. 

The error is (Authentication token is getting generated but workspace creation fails)

Failed to create workspace. Status code: 403
Error message: b'{"error":{"code":"InvalidRequest","message":"WorkspaceV2 creation is disabled on tenant level"}}'

I checked with my administrator and my account was added to the security group which has permission to create workspaces and the “Create workspace” option is turned on.

Is there anything else that needs to be done?

Thanks in advance.

[v-sgandrathi]

Hi @inkfleur,

Thankyou @lbendlin for your prompt response.

I wanted to check if you had the opportunity to review the information provided by community member. Please feel free to contact us if you have any further questions. If the response has addressed your query or if you agree with the reply, please accept it as a solution and give a 'Kudos' so other members can easily find it.

Thank you.

[v-sgandrathi]

Hi @inkfleur,

I wanted to follow up on our previous suggestions regarding the issue. We would love to hear back from you to ensure we can assist you further.

If our response has addressed your query, please accept it as a solution and give a ‘Kudos’ so other members can easily find it. Please let us know if there’s anything else we can do to help.

Thank you.

[inkfleur]

Do you know which relevant scope is needed in that case please?

the official source doesn't mention the need of a different scope when creating a workspace : Groups - Create Group - REST API (Power BI Power BI REST APIs) | Microsoft Learn

[lbendlin · Accepted solution]

Hmm, you are right, the documentation says that Workspace.ReadWrite.All is allegedly sufficient.

If you have a Pro license you can open a Pro ticket at https://admin.powerplatform.microsoft.com/newsupportticket/powerbi
Otherwise you can raise an issue at https://community.fabric.microsoft.com/t5/Issues/idb-p/Issues .

[lbendlin]

Workspace.ReadWrite.All only allows you to manipulate the artifacts inside a workspace. To create a workspace you need a better scope.