Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Earn the coveted Fabric Analytics Engineer certification. 100% off your exam for a limited time only!

Reply
SMR1989
Advocate I
Advocate I

Call Power BI REST API without delegated permissions

Hello, we need to use the Power BI API in order to get metadata about data refresh from an external app.

 

It looks like the only valid authentication method is through delegated permissions, but for security reasons, we can't have a single user with access to every workspace in the company.

 

Anybody knows if there is any other authentication method to get metadata of every dataset in the company without a generic user with access to all workspaces?

 

Thank you!

1 ACCEPTED SOLUTION
SMR1989
Advocate I
Advocate I

Finally, our approach was to create a service principal in Azure. 

Use Azure service principals with Azure PowerShell | Microsoft Docs 

View solution in original post

5 REPLIES 5
SMR1989
Advocate I
Advocate I

Finally, our approach was to create a service principal in Azure. 

Use Azure service principals with Azure PowerShell | Microsoft Docs 

v-lionel-msft
Community Support
Community Support

Hi @SMR1989 ,

 

" I wonder if we could create a user with access to ALL datasets, but with no access to power bi service. So that this user can only access to the dataset throught the API."

I suddenly thought that maybe you can use O365 administrator account to get Audit log instead of API.

v-lionel-msft_1-1615967633295.pngv-lionel-msft_0-1615967614098.png

 

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

 

Hi @v-lionel-msft, thank you so much for your support. Finally, it seems that we found the solution creating a "service principal" in Azure. 

v-lionel-msft
Community Support
Community Support

Hi @SMR1989 ,

 

“Anybody knows if there is any other authentication method to get metadata of every dataset in the company without a generic user with access to all workspaces?”

v-lionel-msft_0-1615363897953.png

If the current account does not have the build permission of the dataset, it is impossible to obtain the dataset through the API. So your idea cannot be realized. You may need different accounts to obtain the corresponding data set information, and then merge them.

 

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Hi @v-lionel-msft,

 

Thanks for your answer, I really appreciate your point of view and we will evaluate the approach of using several accounts and merge the data.

 

In order to explore all the possibilities, I wonder if we could create a user with access to ALL datasets, but with no access to power bi service. So that this user can only access to the dataset throught the API.

 

Thanks for your support!

Helpful resources

Announcements
April AMA free

Microsoft Fabric AMA Livestream

Join us Tuesday, April 09, 9:00 – 10:00 AM PST for a live, expert-led Q&A session on all things Microsoft Fabric!

March Fabric Community Update

Fabric Community Update - March 2024

Find out what's new and trending in the Fabric Community.