Error when configuring Power BI with Azure Purview

Question

question

swapnilkamle-0543 asked Apr 14, '22 JamesTran-MSFT edited May 10, '22

Error when configuring Power BI with Azure Purview

I am trying to Register Power BI with Azure Purview for scanning. When I am trying to create a scan for Power BI. I am getting the following error:

Failed to get access token with given credentials to access PowerBI tenant. Authentication type: PowerBiDelegated Message: AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '0000000'. Trace ID: 1ca-f6xxxx00 Correlation ID: 55acxx-b865-xxa882f1 Timestamp:

I am following the below steps to configure Power BI with Azure Purview:

https://docs.microsoft.com/en-us/azure/purview/register-scan-power-bi-tenant

In my scenario I have followed the below configuration:

Scan same tenant using Self-hosted IR and Delegated authentication

I have used SHIR because my Azure Purview instance is behind private end-point.

I am using a user with Power BI Administrator access for establishing connection with Purview.

However, just want to convey the user is MFA(Multi-Factor-Authentication) enabled.

Also, for the API'S in App Registration I can see the below at my screen.

I am not getting the exact issue for the error. Please help me to understand the issue and solution for the same.

not-supported

log.png (53.1 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-04-14T12:41:23.92Z

isdataninja answered Apr 14, '22 swapnilkamle-0543 commented Apr 26, '22

Your azure global administrator needs to grant this created application admin consent to your tenant. Notice the grayed out link 'Grant admin consent for %tenantname%.

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

swapnilkamle-0543 · Apr 26 at 01:39 PM

I will check with my IT team on this.

0 ·

Answer 2 · 2022-04-14T20:41:47.173Z

JamesTran-MSFT answered Apr 14, '22 JamesTran-MSFT commented May 10, '22

@swapnilkamle-0543
Thank you for your detailed post!

Error Message:
Failed to get access token with given credentials to access PowerBI tenant. Authentication type: PowerBiDelegated Message: AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access.

From your error message, it looks like you'll have to sign-in again using MFA to get an Access Token with your user, or as mentioned by @isdataninja and from the ...Delegated authentication section of the doc that you're following, you'll have to Grant Admin Consent for your tenant.

If you're still having issues, I'd also recommend reaching out to our PowerBI community to see if their experts can look into this issue as well.
Thank you for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

image.png (76.1 KiB)

· 6

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

swapnilkamle-0543 · Apr 26 at 01:39 PM

Thanks for the suggestion. I will ask the IT team to do the same and then i will check.

0 ·

swapnilkamle-0543 swapnilkamle-0543 · May 10 at 06:58 AM

Now i remove the MFA from my Power BI admin account also, added the Admin consent. Now i am getting the following error:

Failed to get access token with given credentials to access PowerBI tenant. Authentication type: PowerBiDelegated Message: AADsssS7xxx218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'. Trace ID: xx-4xxed-xxx-xx-xxxCorrelation ID: xx-xx-xx-bf17-xxTimestamp: 2022-05-10 06:55:16Z.

0 ·

swapnilkamle-0543 swapnilkamle-0543 · May 10 at 07:14 AM

@JamesTran-MSFT : Can you please help here?

0 ·

Show more comments

question