What causes Insufficient permissions to access this resource?

The service account's database role was changed and SELECT permission was removed. A stored procedure or view that the dataset uses now requires a higher privilege level. Row-level security on the data source is returning zero rows instead of raising an error. An Azure resource (Blob Storage, Data Lake) had its RBAC role assignment removed or changed. The data source connection is using personal credentials that do not have organization-wide access

How do I fix Insufficient permissions to access this resource?

Identify which service account is being used for the refresh (check gateway settings or dataset credentials).. Grant the account the minimum necessary permissions: SELECT on all required tables and EXECUTE on stored procedures.. For Azure resources, verify the managed identity or service principal has the correct RBAC role (e.g., 'Storage Blob Data Reader').. Switch from personal credentials to a shared service account so permissions are stable and not tied to a person's account.. Test by running the exact query with the service account credentials in a direct database connection.

High severitycredentials

Power BI Refresh Error:
Insufficient permissions to access this resource

What does this error mean?

The account used to refresh the dataset does not have the required permissions on the data source. The connection succeeds but the query is rejected due to missing access rights.

Common causes

1The service account's database role was changed and SELECT permission was removed
2A stored procedure or view that the dataset uses now requires a higher privilege level
3Row-level security on the data source is returning zero rows instead of raising an error
4An Azure resource (Blob Storage, Data Lake) had its RBAC role assignment removed or changed
5The data source connection is using personal credentials that do not have organization-wide access

How to fix it

1Identify which service account is being used for the refresh (check gateway settings or dataset credentials).
2Grant the account the minimum necessary permissions: SELECT on all required tables and EXECUTE on stored procedures.
3For Azure resources, verify the managed identity or service principal has the correct RBAC role (e.g., 'Storage Blob Data Reader').
4Switch from personal credentials to a shared service account so permissions are stable and not tied to a person's account.
5Test by running the exact query with the service account credentials in a direct database connection.

Frequently asked questions

Does this error affect all users or just the dataset owner?

All users — scheduled and manual refreshes run under the credentials stored in the dataset settings, not individual user accounts.

Can expired OAuth tokens cause this error?

Yes — if the data source uses OAuth (SharePoint, Dynamics 365, Azure), the token expires periodically and must be re-authorized by the dataset owner.

Will this error clear itself after I update the credentials?

Yes — once you re-enter valid credentials in the dataset settings, the next refresh (scheduled or triggered manually) will succeed.

How do I know which dataset is using which credentials?

Go to Power BI Service → Settings → Datasets → Data source credentials for the affected dataset. Each connection shows the credential type and the account it's stored under.

Source · learn.microsoft.com/en-us/power-bi/connect-data/service-troubleshooting-sign-in