Microsoft Power BI
Review the minimum OAuth scopes for every Power BI action.
Review the minimum standard delegated scope mapping for every Microsoft Power BI action. These scopes are Power BI resource scopes (https://analysis.windows.net/powerbi/api/...), not Microsoft Graph. Sites.Selected does not apply.
Minimal scopes per action
Action Description Minimum scopes
Data value changed Polling trigger when data values change in a dataset. Dataset.Read.AllWorkspace.Read.All
Dataset refresh completed Polling trigger when a dataset refresh completes. Dataset.Read.AllWorkspace.Read.All
Execute query Runs DAX, DMV, or MDX against a dataset. Dataset.Read.AllWorkspace.Read.All
Export paginated report (initiate) Starts a paginated report export job. Report.Read.AllWorkspace.Read.All
Export report to file (fetch) Fetches a completed report export. Report.Read.AllWorkspace.Read.All
Export report to file (initiate) Starts a report export job. Report.Read.AllWorkspace.Read.All
Get dashboard details Gets details for a dashboard. Dashboard.Read.AllWorkspace.Read.All
Get dataset dependencies Gets reports and dashboards that use a dataset. Dataset.Read.AllReport.Read.AllDashboard.Read.AllWorkspace.Read.All
Get dataset details Gets details for a dataset. Dataset.Read.AllWorkspace.Read.All
Get dataset schema Gets table and column metadata via XMLA. Dataset.Read.AllWorkspace.Read.All
Get report details Gets details for a report. Report.Read.AllWorkspace.Read.All
Get semantic model measures Gets measures from a semantic model via XMLA. Dataset.Read.AllWorkspace.Read.All
Get semantic model relationships Gets relationships from a semantic model via XMLA. Dataset.Read.AllWorkspace.Read.All
Get table count Gets a table row count. Dataset.Read.AllWorkspace.Read.All
Get table sample Gets sample rows from a table. Dataset.Read.AllWorkspace.Read.All
Get tile details Gets details for a dashboard tile. Dashboard.Read.AllWorkspace.Read.All
List dashboard tiles Lists tiles on a dashboard. Dashboard.Read.AllWorkspace.Read.All
List dashboards Lists dashboards in a workspace. Dashboard.Read.AllWorkspace.Read.All
List dataset tables (Push API only) Lists tables on a Push API dataset. Import datasets need dataset write permission in Power BI, not extra OAuth. Dataset.Read.AllWorkspace.Read.All
List datasets Lists datasets in a workspace. Dataset.Read.AllWorkspace.Read.All
List report pages Lists pages in a report. Report.Read.AllWorkspace.Read.All
List reports Lists reports in a workspace. Report.Read.AllWorkspace.Read.All
List workspaces Lists workspaces the user can access. Workspace.Read.All
Resolve dataset Resolves a dataset by ID, URL, or name. Dataset.Read.AllWorkspace.Read.All
Resolve workspace Resolves a workspace by ID, URL, or name. Workspace.Read.All
Search datasets Searches datasets by name. Dataset.Read.AllWorkspace.Read.All
Search reports Searches reports by name. Report.Read.AllWorkspace.Read.All
Search workspaces Searches workspaces by name. Workspace.Read.All