Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Earn the coveted Fabric Analytics Engineer certification. 100% off your exam for a limited time only!

Reply
Anonymous
Not applicable

Embedding Service principle AppOwnsData 401 ServicePrincipalIsNotAllowedByTenantAdminSwitch

My set-up before starting work with Power BI Embedded was an Azure AD with a group that had a Workspace in the Power BI Service (app.powerbi.com) containing reports. 

To be able to embedd reports I followed the steps here: https://app.powerbi.com/embedsetup/appownsdata

 

I've configured it to use Service Principal but when i try to read the report I get a 401 Unathourized back. In fiddler i see X-PowerBI-Error-Info: ServicePrincipalIsNotAllowedByTenantAdminSwitch but I can't find anything on google that helps me. I have allowed Service Principals to use API:s in the admin settings in Power BI Service. Anyone else experiencing this? I must've missed something basic since I can't find anyone with this issue

 

However when I follow the steps here https://docs.microsoft.com/en-us/power-bi/developer/embed-service-principal

on step 2 I tried creating a new AzureADGroup but when that didn't work i found that add a group user (Service principal) to the power bi workspace was the fix. Why this, what did I do wrong? 

https://docs.microsoft.com/en-us/rest/api/power-bi/groups/addgroupuser

 

5 REPLIES 5
Anonymous
Not applicable

You need to add your service principal in step 5

Anonymous
Not applicable

I had done that, didn't make a difference. But I left that behind now and stuck with the powershell way of doing this which worked

Could you please share how did you fix the issue, i'm getting the same response back from the power bi apis "ServicePrincipalIsNotAllowedByTenantAdminSwitch"
I added the service principal as an admin to my workspace but it's still not working

Anonymous
Not applicable

I'm sorry but I don't remember, I think it was granting the User (service principal) permissions to the workspace https://docs.microsoft.com/en-us/rest/api/power-bi/groups/addgroupuser

I was able to resolve it by going to Power BI Admin portal (accessible from settings cog on https://app.powerbi.com/home), selecting Tenant Settings, and then toggling the Allow service principals to access Power BI APIs setting to enabled

 

See the Getting started with service principal section in this article https://powerbi.microsoft.com/en-us/blog/use-power-bi-api-with-service-principal-preview/

 

Helpful resources

Announcements
April AMA free

Microsoft Fabric AMA Livestream

Join us Tuesday, April 09, 9:00 – 10:00 AM PST for a live, expert-led Q&A session on all things Microsoft Fabric!

March Fabric Community Update

Fabric Community Update - March 2024

Find out what's new and trending in the Fabric Community.

Top Solution Authors