如何在 C# 中以编程方式将服务主体分配给工作区

Question

我已经在 AAD 中创建了一个服务主体，并且能够在 https://app.powerbi.com/home

中手动分配给工作区

我想以编程方式将服务主体分配给所有工作区。

有什么办法吗？

请帮忙

谢谢

Answer 1

是的，您可以使用 Power BI REST API and call Update Group User to add the service principal to the workspace:

要求：

PUT https://api.powerbi.com/v1.0/myorg/groups/f089354e-8366-4e18-aea3-4cb4a3a50b48/users

请求body:

{
  "identifier": "1f69e798-5852-4fdd-ab01-33bb14b6e934",
  "groupUserAccessRight": "Admin",
  "principalType": "App"
}

要使用 API，您必须对自己进行身份验证，例如 ADAL or MSAL. Here is an example 如何使用 MSAL 获取访问令牌：

private static async Task<string> GetToken()
{
   // TODO: Install-Package Microsoft.IdentityModel.Clients.ActiveDirectory -Version 2.21.301221612
   // and add using Microsoft.IdentityModel.Clients.ActiveDirectory

   //The client id that Azure AD created when you registered your client app.
   string clientID = "{Client_ID}";

   //RedirectUri you used when you register your app.
   //For a client app, a redirect uri gives Azure AD more details on the application that it will authenticate.
   // You can use this redirect uri for your client app
   string redirectUri = "https://login.live.com/oauth20_desktop.srf";

   //Resource Uri for Power BI API
   string resourceUri = "https://analysis.windows.net/powerbi/api";

   //OAuth2 authority Uri
   string authorityUri = "https://login.microsoftonline.com/common/";

   //Get access token:
   // To call a Power BI REST operation, create an instance of AuthenticationContext and call AcquireToken
   // AuthenticationContext is part of the Active Directory Authentication Library NuGet package
   // To install the Active Directory Authentication Library NuGet package in Visual Studio,
   //  run "Install-Package Microsoft.IdentityModel.Clients.ActiveDirectory" from the nuget Package Manager Console.

   // AcquireToken will acquire an Azure access token
   // Call AcquireToken to get an Azure token from Azure Active Directory token issuance endpoint
   AuthenticationContext authContext = new AuthenticationContext(authorityUri);
   var token = authContext.AcquireTokenAsync(resourceUri, clientID, new Uri(redirectUri)).Result.AccessToken;

   Console.WriteLine(token);
   Console.ReadLine();

   return token;
}

当您调用 API:

时，必须将此令牌添加到请求 headers

//Add token to the request header
request.Headers.Add("Authorization", String.Format("Bearer {0}", token));

如何在 C# 中以编程方式将服务主体分配给工作区

How to assign Service Principal to workspace programmatically in C#

c#

azure

azure-active-directory

powerbi

powerbi-embedded