cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
rjhale
Helper IV
Helper IV

Access to Scanner APIs

Is it possible to use the new Scanner API endpoints without being a full Global or Power BI admin? 

 

I work in a large organization and manage around 25 workspaces with a lot of dataflows and datasets/reports, but I'm not a Power BI or Glabl Admin in the tenant.  I'm using the other API endpoints in our environment successfully, so I would like to know if it's even possible for me to use the new Scanner APIs before putting in the request to our Cloud Services Team.  

 

Thanks. 

1 ACCEPTED SOLUTION
yingyinr
Community Support
Community Support

Hi @rjhale ,

Please review the content in the following blog and check whether Service Principal authentication for read-only scanner Admin APIs is what you want.

Announcing new Admin APIs and Service Principal authentication to make for better tenant metadata sc...

To better support the security constraints of some organizations, we added service principal support for the scanner Admin APIs. Service principal is an authentication method that can be used to let an Azure AD application access Power BI APIs. With this authentication method, you no longer have to maintain a service account with an admin role. Rather, to allow your app to use the Admin APIs, you just have to give your approval once as part of the tenant settings configuration.

Best Regards

Community Support Team _ Rena
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

2 REPLIES 2
yingyinr
Community Support
Community Support

Hi @rjhale ,

Please review the content in the following blog and check whether Service Principal authentication for read-only scanner Admin APIs is what you want.

Announcing new Admin APIs and Service Principal authentication to make for better tenant metadata sc...

To better support the security constraints of some organizations, we added service principal support for the scanner Admin APIs. Service principal is an authentication method that can be used to let an Azure AD application access Power BI APIs. With this authentication method, you no longer have to maintain a service account with an admin role. Rather, to allow your app to use the Admin APIs, you just have to give your approval once as part of the tenant settings configuration.

Best Regards

Community Support Team _ Rena
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

Ok. I worked with our global admins to get a service principal created, and I was able to call the new scanner APIs with that service principal.  It seems to allow me to get the metadata and scan results for just the workspaces that I grant it access to.  

 

Thanks. 

Helpful resources

Announcements
UG GA Amplification 768x460.png

Launching new user group features

Learn how to create your own user groups today!

November Power BI Update 768x460.png

Check it Out!

Click here to read more about the November 2021 Updates!

M365 768x460.jpg

Microsoft 365 Collaboration Conference | December 7–9, 2021

Join us, in-person, December 7–9 in Las Vegas, for the largest gathering of the Microsoft community in the world.