Community Center | Not monitored
Tag not monitored by Microsoft.
I would need some help on setting up power BI API services
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(220.8, 52%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESR%3C/text%3E%3C/svg%3E)
Srinivasa Ramanujam
0
Reputation points
Hello,
We are trying to integrate Power BI REST APIs using a service principal in Azure. Our app registration is configured correctly and is using client credentials (MSAL), and we’ve already enabled the “Allow service principals to use Power BI APIs” setting in the Power BI Admin Portal for a security group that includes this app.
However, when attempting to add application permissions under the “Power BI Service” API in App registrations, only the following permissions appear:
-
Tenant.Read.All
Tenant.ReadWrite.All
Expected permissions like:
Workspace.Read.All
Report.Read.All
Dataset.Read.All ...are not available in the list under Application permissions, even though they are critical for accessing Power BI endpoints like /groups.
We’ve tried:
Creating new app registrations
Switching to “APIs my organization uses” → Power BI Service
Editing via both Azure UI and Enterprise Apps
Enabling permissions manually in the manifest (which doesn’t populate the UI permissions)
Could you please help us:
Enable the full Power BI Service Application Permissions in our tenant
Verify if there is any configuration or provisioning step missing on Microsoft’s side
Thank youHello,
We are trying to integrate Power BI REST APIs using a service principal in Azure. Our app registration is configured correctly and is using client credentials (MSAL), and we’ve already enabled the “Allow service principals to use Power BI APIs” setting in the Power BI Admin Portal for a security group that includes this app.
However, when attempting to add application permissions under the “Power BI Service” API in App registrations, only the following permissions appear:
Tenant.Read.All
Tenant.ReadWrite.All
Expected permissions like:
Workspace.Read.All
Report.Read.All
Dataset.Read.All
...are not available in the list under Application permissions, even though they are critical for accessing Power BI endpoints like /groups.
We’ve tried:
Creating new app registrations
Switching to “APIs my organization uses” → Power BI Service
Editing via both Azure UI and Enterprise Apps
Enabling permissions manually in the manifest (which doesn’t populate the UI permissions)
Could you please help us:
Enable the full Power BI Service Application Permissions in our tenant
Verify if there is any configuration or provisioning step missing on Microsoft’s side
Thank you
Community Center | Not monitored
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 78%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESG%3C/text%3E%3C/svg%3E)
Sandeep G-MSFT 21,241 Reputation points Microsoft Employee Moderator2025-05-30T05:59:20.72+00:00 Power Bi is not currently supported here on QnA. They're actively answering Power Bi questions in dedicated forums here. https://community.powerbi.com/
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 77%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
Sampath 3,885 Reputation points Microsoft External Staff Moderator2025-06-04T00:57:08.72+00:00 Hello @Srinivasa Ramanujam ,
The Issue you’re encountering missing application permissions like
Report.Read.All,Dataset.Read.All, andWorkspace.Read.Allin Azure AD when configuring the Power BI Service API. This is expected because these permissions do not exist as Application permissions (app-only) in Power BI. They exist only as Delegated permissions (user context).For service principal (app-only) scenarios, Power BI doesn’t use delegated permissions like
Report.Read.All. Instead, it relies on the Tenant.Read.All and Tenant.ReadWrite.All permissions in combination with enabling service principal access at the tenant and workspace level.Steps to Resolve and Proceed
** Confirm Service Principal Access is Enabled**
You’ve already enabled the setting in Power BI Admin Portal:
Tenant settings → Allow service principals to use Power BI APIs and assigned it to your security group.
Add Service Principal to Power BI Workspaces
Since these APIs rely on workspace-level security, ensure the service principal is:
- Added as an Admin or Member to the workspaces you want to access.
Use Tenant-Level Permissions
In Azure AD → App Registration → API Permissions → Power BI Service, the Tenant.Read.All or Tenant.ReadWrite.All permissions are what enable the service principal to call APIs.
-
Tenant.Read.All→ read-only operations across the tenant -
Tenant.ReadWrite.All→ read/write operations across the tenant
Reference: Get Reports as Admin
Microsoft Docs for Deeper Reference
- Power BI Service Principal Embedding
- Admin - Get Reports API
- Solved: Re: Issue with Power BI API Permissions for Report... - Microsoft Fabric Community
Hope this helps. Do let us know if you any further queries .
Sign in to comment
Sign in to answer