我在 Power BI Service 中串接 Microsoft Graph API 的 /users 端點時,因缺乏必要的 OAuth2 權限(如 User.Read.All),導致無法刷新資料,而目前租戶尚未啟用 Admin Consent Workflow,也無法直接為 Power BI 內建應用授權。

Power BI 0 信譽點數
2025-06-17T09:03:45.46+00:00

我正在使用 Power BI Service 串接 Microsoft Graph API,目的是讀取組織內部的使用者清單(/users)。在 Power BI Desktop 中,透過手動取得 Token 的方式可以成功存取資料,但這種方式在 Power BI Service 中會因為動態來源與 POST 請求被阻擋。

因此我改用內建 OAuth2 串接方式,直接呼叫固定 URL https://graph.microsoft.com/v1.0/users,但發現 Power BI Service 使用的是 Microsoft 官方的內建應用程式(App ID: 00000009-0000-0000-c000-000000000000),而非我自訂的 App,因此無法使用我已授權的 User.Read.All 權限。

目前我已在 Graph Explorer 測試過,個人帳號授權 User.ReadBasic.All 後可以成功讀取 /users,但 Power BI Service 仍無法使用。管理員表示無法直接為 Power BI Service 新增權限,只能透過 API 發送權限申請後才能進行審核,但目前租戶尚未啟用 Admin Consent Workflow,也沒有提供使用者提交權限申請的機制。

I'm currently integrating Power BI Service with the Microsoft Graph API to retrieve a list of users via the /users endpoint. While I was able to successfully access this data in Power BI Desktop using a manually acquired token and a POST request, this method is blocked in Power BI Service due to dynamic data source restrictions and the use of POST.

To comply with Power BI Service requirements, I switched to using the built-in OAuth2 mechanism and a static URL (https://graph.microsoft.com/v1.0/users). However, Power BI Service uses Microsoft’s official built-in application (App ID: 00000009-0000-0000-c000-000000000000), not my custom registered app, which means it does not inherit the User.Read.All permission I previously granted.

I tested the /users endpoint in Graph Explorer and confirmed that granting User.ReadBasic.All to my personal account allows me to retrieve basic user data. However, Power BI Service still fails to access this endpoint due to insufficient permissions.

The tenant administrator mentioned that they cannot directly add permissions to the Power BI Service app. Instead, they require an API-based permission request to trigger the approval process. Unfortunately, Admin Consent Workflow is not currently enabled in our tenant, and there is no interface for users to submit permission requests.

I’m seeking guidance on how to formally submit a permission request via API, or alternatively, how to enable Admin Consent Workflow so that the Power BI Service app can be granted the necessary permissions to access the /users endpoint.

螢幕擷取畫面 2025-06-17 170508

螢幕擷取畫面 2025-06-17 170635-fotor-20250617173818

螢幕擷取畫面 2025-06-17 170808-fotor-20250617173413

Azure
Azure

雲端運算平台和基礎結構,可透過 Microsoft 管理的資料中心全球網路來建置、部署和管理應用程式與服務。


您的回答

答案可由問題作者標示為「已接受」,而由仲裁者標示為「推薦」,這可協助使用者知道答案解決了作者的問題。