Admin API's and Service Principal Authentication = 401 Unauthorized

[powerbi_jenhen]

Hi,

I have registered an azure app for my service principal, added it to an Azure Security group and added this group to my admin and non-admin api tenant developer settings. The app has been granted the correct API permissions for Power BI Service without any admin consent requirements (see below). I have added the group with admin permissions to all tenant workspaces. Via Powershell I can successfully authenticate using the service principal for non-admin api calls but everytime I attempt to call admin api calls, like the below, I receive "401 Unauthorized"?? Any help appreciated.

Invoke-PowerBIRestMethod -Url 'admin/groups?$top=100' -Method Get | ConvertFrom-Json

[powerbi_jenhen · Accepted solution]

I figured this out, my azure app permissions of type "Application" had "Admin consent", as described in the below article, this must be remove:

Enable service principal authentication for read-only admin APIs - Power BI | Microsoft Learn

[powerbi_jenhen]

Hi,

Thanks for your reply. Yes, this option has been enabled for my security group but I still get the 401?

Thanks.

[v-yiruan-msft]

Hi @powerbi_jenhen ,

According to the error code, it seems that you didn't get the proper permission to access Admin REST API. Please check if you enable the option Allow service principals to use read-only Power BI admin APIs under Admin API settings in Admin portal.

Enable service principal authentication for read-only admin APIs

Best Regards