Share via

"Access to the resource is forbidden." when getting data from Azure Resource Graph via PowerBI

Guo, Jianning 105 Reputation points
2025-03-04T16:02:35.3833333+00:00

I'm using the Azure Resource Graph (ARG) connector in PowerBI Desktop. The query "Resources | take 5" works fine in the Azure Portal's ARG Explorer, but in PowerBI, I get an 'Access to the resource is forbidden' error. My colleague (global admin) can run it successfully in PowerBI. I have full read permissions and can query in the Azure Portal, but not in PowerBI. Any suggestions for troubleshooting? Are there additional Azure roles I need?

Microsoft Security | Microsoft Graph
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. kagiyama yutaka 160 Reputation points
    2026-02-06T14:24:03.8966667+00:00

    PowerBI doesn’t use the portal’s data‑plane permissions — it queries arg through the arm control‑plane. that path requires a role with Microsoft.ResourceGraph/*/read, so reader isn’t enough. assigning resource graph reader fixes the forbidden error, which is why your admin can run it and you can’t.

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.