Category Archives: PowerBI

M365Permissions v1.0.9

Today’s release has an awesome new feature called ‘Changed Detection’, which will help you identify which permissions have changed since the previous run of M365Permissions.

Full changelog:

  • [Feature] Base support for app-only authentication
  • [Feature] Change detection (diff)
  • [Feature] Persist customizations between runs
  • [BugFix] Multi threading module load issue

Download / Use:

M365Permissions module page | Github | PSGallery

M365Permissions v1.0.8

Changes:

  • [Feature] Added ServicePrincipals to scannable resources
  • [Feature] Increase scan speed of Entra (enumeration of users and groups)
  • [Feature] Make output folder configurable
  • [Feature] Better memory handling
  • [BugFix] SpO authentication concurrent auth cache write failure

Download / Use:

M365Permissions module page | Github | PSGallery

M365Permissions v1.0.6

  • [Feature] Add multi-threading for huge performance gains
  • [Feature] Subclassify user as Internal or External
  • [Feature] Split SpO into three tabs
  • [Feature] Add Entra hidden webhooks (subscriptions)
  • [Bugfix] Improve progress bars

For more info:

M365Permissions module page || Github || PSGallery

Managed Identity auth against PowerBi Rest API’s

on https://learn.microsoft.com/en-us/rest/api/power-bi/ I couldn’t (easily) find if Managed Identities are supported when using the PowerBI rest API, especially the ‘asadmin’ parts.

The documentation also doesn’t really show (or I couldn’t find it), for what audience to request a token. Using a Logic App I eventually got it to work after a lot of trial and error 🙂

For those googling this, I encountered a bunch of these first before finding the right audience of ‘https://api.fabric.microsoft.com’

Http request failed as there is an error getting AD OAuth token: ‘AADSTS500011: The resource principal named https://api.fabric.microsoft.com/.default was not found in the tenant named XXXXX. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You might have sent your authentication request to the wrong tenant.

Http request failed as there is an error getting AD OAuth token: ‘AADSTS500011: The resource principal named https://api.powerbi.com was not found in the tenant named XXX

Http request failed as there is an error getting AD OAuth token: ‘AADSTS500011: The resource principal named https://analysis.windows.net/powerbi/api/.default was not found in the tenant named XXX

Http request failed as there is an error getting AD OAuth token: ‘AADSTS500011: The resource principal named https://analysis.windows.net was not found in the tenant named XXX