What permissions do I need to request to refresh a dataset via API?

[therealomacoder]

Hi gurus- I'm using Make.com for an ETL process. At the end of the workflow, I want to trigger a refresh of the PowerBI dataset.

I'm getting an error when I try to connect to PowerBI through this API.

Need admin approval

Make needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it.

Question - how would I describe to said "admin" what exact permissions I am requesting, and the steps that the admin would perform to grant me the correct permissions? I've already tried asking the "admin" but they are not technical in nature and this is just a small company. I believe this is the first project in PowerBI that this company is using. I've asked them just to give me admin access to manage the PowerBI tenant, but that is not approved. 

I searched documentation but I must not be using the correct terms in my search, as I cannot find any docs that describe the steps an admin would take to grant these (unspecified) permissions.

See video of workfow here:

https://www.loom.com/share/2ffc7b8be9b84247a0444399240acb1f

[v-luwang-msft]

Hi @therealomacoder ,

• Check if the Allow users to consent to apps accessing company data on their behalf is set to No in Enterprise Application Users settings.

  If it set to No then please toggle it to yes . This option lets users decide by themselves if they want to grant access to a given app to everyone in their organization.

From Microsoft’s official documentation: If this option is set to yes, then users may consent to allow applications which are not published by Microsoft to access your organization’s data, if the user also has access to the data. This also means that the users will see these apps on their Access Panels. If this option is set to no, then admins must consent to these applications before users may use them.

• Check if the Allow users to request admin consent to apps they are unable to consent to is set to No.

  If it is set to No then toggle it to yes as well. If your organization decides that users indeed must have explicit approval, this option makes it easy for those users to request approval.

  To enable this option, click on User settings (same as in the previous stem) and then toggle Admin consent requests to “Yes”. Make sure to Save your changes, which may take a few minutes to propagate.

From Microsoft Documentation: If this option is set to yes, then users request admin consent to any app that requires access to data they do not have the permission to grant. If this option is
set to no, then users must contact their admin to request to consent
in order to use the apps they need.

Note : If this Setting is done from your APP tenant , Please also check the external users tenant as this needs to be done from their side as well as while trying to use the app, your app will retrieve user profile etc. from the users tenant .

• Add Priority Matrix as an Enterprise Application (org-wide)

  if your AAD administrator decides that everyone in your organization should get access to Priority Matrix, they can follow these steps:

  From the “Enterprise Applications” view, click on All Applications

  Select + New Application to set up Priority Matrix with Azure AD authentication

  Search “Priority Matrix” and proceed to configure the app with AD authentication

Note: If you still face the issue please reach out to Azure support engineer to get assisted support by clicking on (Help+support) and creating a technical support request as it may need live troubleshooting.

And pls refer the following articles:

https://docs.microsoft.com/en-us/answers/questions/37875/application-needs-permission-to-access-reso...

Did I answer your question? Mark my post as a solution!

Best Regards

Lucien

[therealomacoder]

Thank you so much for your well thought out solution.

Unfortunately I had to move on and work on finding another solution because I ran out of time and this project was supposed to be delivered to the client already.

I went down the route of publishing the content to my PowerBI tenant and then inviting those external users as B2B guests to my tenant to do the reporting. Then we can bypass their IT Admin who didn't seem to have any clue how to get these correct permissions. However - these B2B users cannot access information from my Tenant, even though I've shared it. I've opened a new question on that. I hope I can figure that issue out as I don't want to have to revisit this.  This sounds way to complicated.