# Access to the resource is forbidden using Power BI Dynatrace Grail DQL Connector for smartscape commands in DQL

**URL:** <https://community.dynatrace.com/t/access-to-the-resource-is-forbidden-using-power-bi-dynatrace-grail-dql-connector-for-smartscape-commands-in-dql/55279>\
**Category:** DQL\
**Tags:** power-bi, dql, smartscape\
**Created:** [March 17, 2026, 5:25am UTC](https://community.dynatrace.com/t/access-to-the-resource-is-forbidden-using-power-bi-dynatrace-grail-dql-connector-for-smartscape-commands-in-dql/55279 "2026-03-17T05:25:39Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![AlanFoley](https://avatars.discourse-cdn.com/v4/letter/a/c67d28/32.png) [@AlanFoley](https://community.dynatrace.com/u/AlanFoley)\
**Post date:** [March 17, 2026, 5:25am UTC](https://community.dynatrace.com/t/access-to-the-resource-is-forbidden-using-power-bi-dynatrace-grail-dql-connector-for-smartscape-commands-in-dql/55279/1 "2026-03-17T05:25:39Z")

</div>

Hi  
I am trying to get the following DQL commands working using Power BI Dynatrace Grail DQL Connector  
DQL commands like: “fetch dt.system.events” or “fetch dt.entity.host” all work 100% so I have permission to access Dynatrace  
The challenge comes in whe I try and use smartscape commands within DQL  
All smartscapeNodes or&nbsp;smartscapeEdges commands give the following error:  
_ **Access to the resource is forbidden** _  
Some additional Information:

The Smartscape permissions page shows that Smartscape relies on **multiple Grail storage permissions** , not just `storage:smartscape:read`.  
Specifically, the following permissions are required by Smartscape data flows:

- **`storage:smartscape:read`** – required to query the Smartscape table.
- **`storage:entities:read`** – required for entity metadata used by Smartscape.
- **`storage:buckets:read`** – required for resolving problem/event relationships.
- **`storage:events:read`** – referenced in Smartscape permission tables as required for edges.

Notebooks succeed because the Dynatrace UI performs additional backend lookups **with your user context** , which already has expanded permissions.&nbsp;Power BI does not use your user context.&nbsp;It uses the **Grail DQL API** ,

I have all the above permissions defined correctly  
Has anyone come across a similar issue or has anyone succesfully used smartscape commands using the&nbsp; Power BI Dynatrace Grail DQL Connector  
Any help appreciated  
Thanks  
Alan

---

<div class="post-metadata">

**Author:** ![Tomek](https://avatars.discourse-cdn.com/v4/letter/t/3ab097/32.png) [@Tomek](https://community.dynatrace.com/u/Tomek)\
**Post date:** [March 17, 2026, 1:47pm UTC](https://community.dynatrace.com/t/access-to-the-resource-is-forbidden-using-power-bi-dynatrace-grail-dql-connector-for-smartscape-commands-in-dql/55279/2 "2026-03-17T13:47:18Z")

</div>

Hi Alan,

Thank you for reporting that. I am about to add the missing scope. Please check again tomorrow.

Best regards,

Tomasz Gacek