The <> user does not have permissions to call the Discover method

[mads-stibo]

Hi - I have enabled the XMLA-endpoint and is (Fabric) Workspace admin - however get the The <> user does not have permissions to call the discover method error when trying to sign in to a Fabric-hosed sematic model - what do I miss?

[otykier]

If you're using the "Integrated" authentication option, you may be attempting to sign in using an account that does not have access to the model (the Work or School Account that's set up in Windows).

Choose the "Microsoft Entra MFA" option instead, which should show an account selector popup:

[mads-stibo]

Hi – I of course using MFA: ***@***.*** After being prompted I get: ***@***.***

[otykier]

sorry, it looks like you replied to the e-mail notification, rather than answering the thread directly on GitHub, so your reply got censored. But it sounds like you're using the MFA option. Could you confirm that you're using the latest version of TE3, 3.22.1?

Also, I assume that you have the necessary permissions on both the workspace and the semantic model inside the workspace? More details here.

Another thing you may want to try, is to type out the full organization name in the XMLA connection string (for me that would be putting "tabulareditor.com" instead of "myorg").

[mads-stibo]

Hi – all requirements in the linked document is met – the version is Build 3.22.1.7600 (Currently evaluation license: f7f8cc2a-0b74-4d3f-886e-c23f64db2a0b Mads Carsten Brink Hansen Data Architect ***@***.***<https://www.stibosystems.com/> From: Daniel Otykier ***@***.***> Date: Friday, 11 July 2025 at 12.56 To: TabularEditor/TabularEditor3 ***@***.***> Cc: Mads Carsten Brink Hansen ***@***.***>, Author ***@***.***> Subject: Re: [TabularEditor/TabularEditor3] The <> user does not have permissions to call the Discover method (Discussion #1475) External e-mail. sorry, it looks like you replied to the e-mail notification, rather than answering the thread directly on GitHub, so your reply got censored. But it sounds like you're using the MFA option. Could you confirm that you're using the latest version of TE3, 3.22.1<https://docs.tabulareditor.com/te3/other/release-notes/3_22_1.html?tabs=downloads>? Also, I assume that you have the necessary permissions on both the workspace and the semantic model inside the workspace? More details here<https://docs.tabulareditor.com/common/xmla-as-connectivity.html#workspace-level-user-rights>. Another thing you may want to try, is to type out the full organization name in the XMLA connection string (for me that would be putting "tabulareditor.com" instead of "myorg"). — Reply to this email directly, view it on GitHub<#1475 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/BUQ724VSCKJUA6MH2Q7H3CL3H6J3VAVCNFSM6AAAAACBJG4WGGVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTGNZTGA3TSOI>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[otykier]

So looking at other support tickets from users that saw the same error message, this seems to be related to Fabric capacity pause/resume operations. Apparently, there is a client side cache of capacity-to-workspace mappings, which means that you have to wait ~10 minutes or restart Tabular Editor 3 after a capacity has been resumed.

If it's been more than 10 minutes since the capacity was started, and you already restarted Tabular Editor 3, I'm afraid you'll need to open a support ticket with Microsoft, informing them that you got that specific error message when attempting to access the model through the XMLA endpoint.