MetricSign
Start free
High severityauthentication

Power BI Refresh Error:
LSROBOTokenFailure

What does this error mean?

A Fabric pipeline failed to acquire an auth token. The stored refresh token is stale — fix by updating and saving the affected pipeline to refresh auth context.

Common causes

  • 1Microsoft Entra ID checks the deviceId claim in the pipeline's stored refresh token — if that device no longer exists or is disabled, token issuance fails
  • 2The pipeline user's password was changed or reset, invalidating the stored refresh token
  • 3Conditional access policies block token issuance (Access has been blocked by Conditional Access policies)
  • 4The user who created the pipeline has left the organization, causing device/account state changes that invalidate the token chain

How to fix it

  1. 1Update and save each affected pipeline to refresh its auth context (for example, edit the description and save).
  2. 2Saving the pipeline forces it to acquire a fresh token, replacing the stale refresh token.
  3. 3For a few pipelines, use the Microsoft sample script: https://github.com/microsoft/fabric-samples/blob/main/docs-samples/data-factory/update-few-pipelines.ps1.
  4. 4To update all pipelines in a subscription at once, use: https://github.com/microsoft/fabric-samples/blob/main/docs-samples/data-factory/update-all-pipelines.ps1.
  5. 5If the error message contains 'Device object was not found', the device that created the pipeline token no longer exists in Entra ID — update and save the pipeline as described above.

Frequently asked questions

Does this error affect all users or just the dataset owner?

The refresh runs under the dataset owner's OAuth token. Only the dataset owner needs to re-authorize — other users can still view existing report data.

How often do OAuth tokens expire in Power BI?

It depends on the connected service. Microsoft 365 tokens typically expire after 60–90 days of inactivity. SharePoint Online tokens may expire sooner if the organization's token lifetime policy is stricter.

Can I prevent this from happening again?

Use a service account (non-personal account) as the dataset owner for production datasets. Service account tokens don't expire due to password resets or departures.

Does this error appear in Power BI Desktop?

No — authentication errors of this type only occur during scheduled or manual refreshes in Power BI Service.

Source · learn.microsoft.com/en-us/fabric/data-factory/pipeline-troubleshoot-guide

Other authentication errors