Unauthorized (401) Power BI Embedded using the samples Node and .NET

Question

When running the examples of embedded for your customers applications (both Node and .NET), I get this error (in the console is coming from /getEmbedToken)

Status: Unauthorized (401)
Response: {"error":{"code":"PowerBINotAuthorizedException","pbi.error":{"code":"PowerBINotAuthorizedException","parameters":{},"details":[],"exceptionCulprit":1}}}
RequestId: fe5ca8dd-a49e-41b0-8f08-**********

The report I embedded is visible from Power BI service (app.powerbi.com)

I have tried:

Made sure config.json and web.config have the right information (clientId, reportId, tenantId, etc)
The authenticationMode is ServicePrincipal, and I'm using the credentials of the Global Admin (same user that created the dataset, report, has all permissions, is App Registration Owner, etc.)
All permissions granted on Power BI REST APIs on the App Registration
Workspace access is enabled
I'm using a Pro trial and have not used any developer tokens yet ("usage": 0)
The dataset is not requiring effective identity ("isEffectiveIdentityRequired": false)

Has anyone any clue of what else to check?

Thanks!

Check the license mode of the workspace - is it Pro, Premium per user, Premium per capacity or Embedded? See Assigning workspaces to capacities. — Andrey Nikolov
– Andrey Nikolov, Commented Aug 18, 2021 at 10:28

daniel p · Accepted Answer · 2021-08-19 09:22:27Z

7

I found the problem. In case this happens to anybody, here's the solution:

The problem was in Step 7 - Enable workspace access that states Sign in to Power BI service > workspace you want to enable > Workspace access > Access pane, > copy the service principal to the Enter email address text box.

Because the email of the global admin was already filled out, I overlooked the actual requirement of entering the service principal ("Enter email address" was confusing).

The name of the service principal is the Display Name of the Azure AD app, as it appears in the Azure AD app's overview tab. This could also be a security group if you defined any.

answered Aug 19, 2021 at 9:22

daniel p

98910 silver badges19 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Unauthorized (401) Power BI Embedded using the samples Node and .NET

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related