DQL
Questions about Dynatrace Query Language
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Access to the resource is forbidden using Power BI Dynatrace Grail DQL Connector for smartscape commands in DQL

AlanFoley
Helper

Hi
I am trying to get the following DQL commands working using Power BI Dynatrace Grail DQL Connector
DQL commands like: "fetch dt.system.events" or "fetch dt.entity.host" all work 100% so I have permission to access Dynatrace
The challenge comes in whe I try and use smartscape commands within DQL
All smartscapeNodes or smartscapeEdges commands give the following error:
Access to the resource is forbidden
Some additional Information:

The Smartscape permissions page shows that Smartscape relies on multiple Grail storage permissions, not just storage:smartscape:read.
Specifically, the following permissions are required by Smartscape data flows:

  • storage:smartscape:read – required to query the Smartscape table. 
  • storage:entities:read – required for entity metadata used by Smartscape. 
  • storage:buckets:read – required for resolving problem/event relationships.
  • storage:events:read – referenced in Smartscape permission tables as required for edges. 

Notebooks succeed because the Dynatrace UI performs additional backend lookups with your user context, which already has expanded permissions. Power BI does not use your user context. It uses the Grail DQL API,

I have all the above permissions defined correctly
Has anyone come across a similar issue or has anyone succesfully used smartscape commands using the  Power BI Dynatrace Grail DQL Connector
Any help appreciated
Thanks
Alan

1 REPLY 1

Tomek
Dynatrace Promoter
Dynatrace Promoter

Hi Alan,

Thank you for reporting that. I am about to add the missing scope. Please check again tomorrow.

 

Best regards,

Tomasz Gacek

Featured Posts