cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
tripleacoder
Helper I
Helper I

Power BI REST API gives 403 error (User does not have access to group)

I am trying to use the Power BI REST API with a "Power BI master account" - meaning a user account for the "app owns data" scenario.

The account has a Power BI Pro license and is a member of the workspace I am trying to read from.

 

I have also made the account the owner of the app registration for my app.

 

I can get a token, but when I call the API to get a data set id from the workspace, I get 403 (Forbidden).

 

The same program works if I use my personal credentials.

What am I missing?

1 ACCEPTED SOLUTION

It seems I found the hidden setting:

 

https://community.powerbi.com/t5/Service/Manage-Permissions-in-Power-BI-Service/td-p/322832

 

Apparently, the dataset in the workspace requires the user to be added with "Manage permissions"...

After I did that, the error disappeared.

 

Very illogical, since Manage permissions seems to be related to sharing...

View solution in original post

7 REPLIES 7
tripleacoder
Helper I
Helper I

I have promoted the account to Owner/Admin of the workspace, but it doesn't seem to have helped.

Using the following code:

 

 

System.Net.WebException ex;



Stream stream = ((System.Net.HttpWebResponse)(ex).Response).GetResponseStream();
using (StreamReader sr = new StreamReader(stream))
{
     string text = sr.ReadToEnd();
}

 

 

I was able to extract more detailed error information from the exception:

 

{"error":
{"code":"Unauthorized","message":"User(<ii>76e423fd-314d-42ff-ab23-306f25c46aea</ii>) does not have access to Group(<ii>2c6f2b64-162d-40c8-934e-44e3075c5ee8</ii>) with Permissions(ReadWrite)"}
}

This is the scope part of the decoded token (which doesn't work):

 

scp"Dataset.ReadWrite.All Workspace.ReadWrite.All",

 

 

This is the same part, when using my own credentials (which works):

 

scp"Dataset.ReadWrite.All Workspace.ReadWrite.All",

 

They are equal...

Why doesn't the user have access to the group/workspace? I have made it owner/admin...

 

Also, I get the same error when instead of retrieving a dataset id,  I try to create a new dataset in the same group.

 

Is it necessary to make the user Power BI Service Administrator?

Hi @tripleacoder,

 

1. Which API exactly is it?

2. Which token did you send with the request? Is it the one starts with "eyJ0e" or the one starts with "H4sIAAA"? It should be the former.

3. Are there any other message about the error?

 

Best Regards,

Community Support Team _ Dale
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

It seems I found the hidden setting:

 

https://community.powerbi.com/t5/Service/Manage-Permissions-in-Power-BI-Service/td-p/322832

 

Apparently, the dataset in the workspace requires the user to be added with "Manage permissions"...

After I did that, the error disappeared.

 

Very illogical, since Manage permissions seems to be related to sharing...

Thanks for sharing. I'm glad you solved it.

 

Best Regards,

Community Support Team _ Dale
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Helpful resources

Announcements
Microsoft Build 768x460.png

Microsoft Build is May 24-26. Have you registered yet?

Come together to explore latest innovations in code and application development—and gain insights from experts from around the world.

charticulator_carousel_with_text (1).png

Charticulator Design Challenge

Put your data visualization and design skills to the test! This exciting challenge is happening now through May 31st!

May UG Leader Call Carousel 768x460.png

What difference can a User Group make for you?

At the monthly call, connect with other leaders and find out how community makes your experience even better.

Power BI Release May 2022 768x460.png

Check it out!

Click here to read more about the May 2022 updates!