Embedding Service principle AppOwnsData 401 ServicePrincipalIsNotAllowedByTenantAdminSwitch

[Anonymous]

My set-up before starting work with Power BI Embedded was an Azure AD with a group that had a Workspace in the Power BI Service (app.powerbi.com) containing reports. 

To be able to embedd reports I followed the steps here: https://app.powerbi.com/embedsetup/appownsdata

I've configured it to use Service Principal but when i try to read the report I get a 401 Unathourized back. In fiddler i see X-PowerBI-Error-Info: ServicePrincipalIsNotAllowedByTenantAdminSwitch but I can't find anything on google that helps me. I have allowed Service Principals to use API:s in the admin settings in Power BI Service. Anyone else experiencing this? I must've missed something basic since I can't find anyone with this issue

However when I follow the steps here https://docs.microsoft.com/en-us/power-bi/developer/embed-service-principal

on step 2 I tried creating a new AzureADGroup but when that didn't work i found that add a group user (Service principal) to the power bi workspace was the fix. Why this, what did I do wrong? 

https://docs.microsoft.com/en-us/rest/api/power-bi/groups/addgroupuser

[Anonymous]

You need to add your service principal in step 5

[Anonymous]

I had done that, didn't make a difference. But I left that behind now and stuck with the powershell way of doing this which worked

[rafapaz05]

Could you please share how did you fix the issue, i'm getting the same response back from the power bi apis "ServicePrincipalIsNotAllowedByTenantAdminSwitch"
I added the service principal as an admin to my workspace but it's still not working

[Anonymous]

I'm sorry but I don't remember, I think it was granting the User (service principal) permissions to the workspace https://docs.microsoft.com/en-us/rest/api/power-bi/groups/addgroupuser

[vince-koch]

I was able to resolve it by going to Power BI Admin portal (accessible from settings cog on https://app.powerbi.com/home), selecting Tenant Settings, and then toggling the Allow service principals to access Power BI APIs setting to enabled

See the Getting started with service principal section in this article https://powerbi.microsoft.com/en-us/blog/use-power-bi-api-with-service-principal-preview/