topic Access to the resource is forbidden using Power BI Dynatrace Grail DQL Connector for smartscape commands in DQL in DQL https://community.dynatrace.com/t5/DQL/Access-to-the-resource-is-forbidden-using-Power-BI-Dynatrace/m-p/296256#M3213 <P>Hi<BR />I am trying to get the following DQL commands working using Power BI Dynatrace Grail DQL Connector<BR />DQL commands like: "fetch dt.system.events" or "fetch dt.entity.host" all work 100% so I have permission to access Dynatrace<BR />The challenge comes in whe I try and use smartscape commands within DQL<BR />All smartscapeNodes or&nbsp;smartscapeEdges commands give the following error:<BR /><EM><STRONG>Access to the resource is forbidden</STRONG></EM><BR />Some additional Information:</P> <DIV> <P>The Smartscape permissions page shows that Smartscape relies on <STRONG>multiple Grail storage permissions</STRONG>, not just <CODE>storage:smartscape:read</CODE>.<BR />Specifically, the following permissions are required by Smartscape data flows:</P> <UL> <LI><STRONG><CODE>storage:smartscape:read</CODE></STRONG> – required to query the Smartscape table.&nbsp;</LI> <LI><STRONG><CODE>storage:entities:read</CODE></STRONG> – required for entity metadata used by Smartscape.&nbsp;</LI> <LI><STRONG><CODE>storage:buckets:read</CODE></STRONG> – required for resolving problem/event relationships.</LI> <LI><STRONG><CODE>storage:events:read</CODE></STRONG> – referenced in Smartscape permission tables as required for edges.&nbsp;</LI> </UL> <P>Notebooks succeed because the Dynatrace UI performs additional backend lookups <STRONG>with your user context</STRONG>, which already has expanded permissions.&nbsp;Power BI does not use your user context.&nbsp;It uses the <STRONG>Grail DQL API</STRONG>,</P> <P>I have all the above permissions defined correctly<BR />Has anyone come across a similar issue or has anyone succesfully used smartscape commands using the&nbsp; Power BI Dynatrace Grail DQL Connector<BR />Any help appreciated<BR />Thanks<BR />Alan</P> </DIV> Tue, 17 Mar 2026 07:48:56 GMT AlanFoley 2026-03-17T07:48:56Z Access to the resource is forbidden using Power BI Dynatrace Grail DQL Connector for smartscape commands in DQL https://community.dynatrace.com/t5/DQL/Access-to-the-resource-is-forbidden-using-Power-BI-Dynatrace/m-p/296256#M3213 <P>Hi<BR />I am trying to get the following DQL commands working using Power BI Dynatrace Grail DQL Connector<BR />DQL commands like: "fetch dt.system.events" or "fetch dt.entity.host" all work 100% so I have permission to access Dynatrace<BR />The challenge comes in whe I try and use smartscape commands within DQL<BR />All smartscapeNodes or&nbsp;smartscapeEdges commands give the following error:<BR /><EM><STRONG>Access to the resource is forbidden</STRONG></EM><BR />Some additional Information:</P> <DIV> <P>The Smartscape permissions page shows that Smartscape relies on <STRONG>multiple Grail storage permissions</STRONG>, not just <CODE>storage:smartscape:read</CODE>.<BR />Specifically, the following permissions are required by Smartscape data flows:</P> <UL> <LI><STRONG><CODE>storage:smartscape:read</CODE></STRONG> – required to query the Smartscape table.&nbsp;</LI> <LI><STRONG><CODE>storage:entities:read</CODE></STRONG> – required for entity metadata used by Smartscape.&nbsp;</LI> <LI><STRONG><CODE>storage:buckets:read</CODE></STRONG> – required for resolving problem/event relationships.</LI> <LI><STRONG><CODE>storage:events:read</CODE></STRONG> – referenced in Smartscape permission tables as required for edges.&nbsp;</LI> </UL> <P>Notebooks succeed because the Dynatrace UI performs additional backend lookups <STRONG>with your user context</STRONG>, which already has expanded permissions.&nbsp;Power BI does not use your user context.&nbsp;It uses the <STRONG>Grail DQL API</STRONG>,</P> <P>I have all the above permissions defined correctly<BR />Has anyone come across a similar issue or has anyone succesfully used smartscape commands using the&nbsp; Power BI Dynatrace Grail DQL Connector<BR />Any help appreciated<BR />Thanks<BR />Alan</P> </DIV> Tue, 17 Mar 2026 07:48:56 GMT https://community.dynatrace.com/t5/DQL/Access-to-the-resource-is-forbidden-using-Power-BI-Dynatrace/m-p/296256#M3213 AlanFoley 2026-03-17T07:48:56Z Re: Access to the resource is forbidden using Power BI Dynatrace Grail DQL Connector for smartscape commands in DQL https://community.dynatrace.com/t5/DQL/Access-to-the-resource-is-forbidden-using-Power-BI-Dynatrace/m-p/296284#M3214 <P>Hi Alan,</P><P>Thank you for reporting that. I am about to add the missing scope. Please check again tomorrow.</P><P>&nbsp;</P><P>Best regards,</P><P>Tomasz Gacek</P> Tue, 17 Mar 2026 13:47:18 GMT https://community.dynatrace.com/t5/DQL/Access-to-the-resource-is-forbidden-using-Power-BI-Dynatrace/m-p/296284#M3214 Tomek 2026-03-17T13:47:18Z