Low severityauthentication
Power BI Error:
AADSTS50173
What does this error mean?
The refresh token used for authentication has been revoked or expired — the user must re-authenticate to obtain a fresh token.
Common causes
- 1The user changed or reset their password, which invalidates all refresh tokens issued before that moment
- 2An administrator explicitly revoked the user's refresh tokens (e.g. via Revoke-AzureADUserAllRefreshToken or the Entra ID portal)
- 3The refresh token reached its lifetime limit and expired naturally
- 4A Conditional Access or risk-based policy forced re-authentication, invalidating the existing grant
- 5A service account / scheduled refresh (Power BI dataset, ADF linked service, Fabric pipeline) is still using a cached token issued before the TokensValidFrom date
How to fix it
- 1Sign out of the application completely and sign back in so Entra ID issues a fresh refresh token after the current TokensValidFrom timestamp
- 2For Power BI scheduled refresh or dataflows: open the dataset settings → Data source credentials → Edit credentials and re-authenticate the OAuth2 connection
- 3For Azure Data Factory / Fabric pipelines: open the affected linked service and re-enter credentials, or rotate to a service principal / managed identity to avoid user-token revocation entirely
- 4If the account is a shared/service identity, migrate the connection to a service principal or managed identity — these are not affected by user password changes
- 5If the error persists after re-auth, ask an Entra ID admin to check the user's sign-in logs and confirm no Conditional Access policy or risk detection is forcing immediate token revocation