ferrybouwman/power-bi-read-only-rest-api

Solution based on either Powershell or Power Automate (Flow) to consume the recently released Power BI Asynchronous Unified Scanning API

Powershell & Power Automate (Flow) to consume Power BI Asynchronous Unified Scanning API

This solution provides a basis for your Power BI monitoring needs, based on the newly released Admin APIs. I created the solution in Power Automate and in Powershell for you, choose one!

Benefits of the new API:

1. It's easy to setup: only an application registration in Azure AD, security group and Power BI Admin setting, no per workspace permissions required
2. It's easy to use: no signed in user (delegation), and thus easy to consume within Power Automate without custom connectors (HTTP connector is premium though)
3. More secure: no admin account necessary and read-only
4. It's fast! I read almost 6000 workspaces including metadata within minutes.

For more information about the new API, check this blog post: https://powerbi.microsoft.com/en-us/blog/announcing-new-admin-apis-and-service-principal-authentication-to-make-for-better-tenant-metadata-scanning/

In short, what the solution does:

1. Retrieve list with workspace Ids which have been modified since a given date, or a full report.
2. Split workspaces in batches of 100 and request details.
3. Retrieve details in separate loop, since the API is asynchronous.
4. Output to JSON file.

The solution has one dependency

1. Created an application registration (WITHOUT API permissions in Azure AD), put in a security group and have the security group in the Power BI Admin settings enabled for the use of the read-only Admin APIs, see blog post mentioned above.