powerbi api authentication - wrong scope

Question

I try to get the list of the datasets for a particular tenant, using: https://api.powerbi.com/v1.0/myorg/datasets

I get then a 403 error, it seems that my access code is not suitable for this call.

I could get an access_code successfully but I assume that it has the wrong scope since the response states: "scope": "openid profile email User.Read"

yet I granted the correct permissions in azure:

when trying to add in the scope in the authentication call: openid offline_access DataSet.ReadWrite.All then I get an invalid_grant error

Answer 1

Try openid profile email https://analysis.windows.net/powerbi/api/.default as the scope.

You can find this endpoint while adding the power bi permission from Azure Portal: