The following are the pre-configuration steps involved in establishing Power BI connection using Tenant ID:
- Register an application in the Azure AD (Active Directory) portal.
- Establish workspace access from the Power BI portal to the Azure portal registered application.
- Check the User.Read (Microsoft Graph) from the API permissions of the registered application in the Azure portal.
- Enable ‘Tenant Settings’ to allow service principals to use Power BI APIs.
1. Register an application in the Azure AD (Active Directory) portal:
- Login to Azure web portal.
- Let’s click the Azure Active Directory option.
- The user is navigated to the Azure Active Directory session page.
- Click App registrations from the left menu options.
- Now, click + New Registration option.
- The user is navigated to the Register an application session page.
- Let’s add RD Power BI For Document under the Name text field.
- Let’s select the second radio button option for the Supported account types.
- Click the Register button.
- This action generates Application (client) ID, Object ID, and Directory (tenant) ID.
Note: Application (client) ID, Object ID, and Directory (tenant) ID are blurred due to confidential data.
- Click the Add a certificate or secret from the Client credentials option.
- Click the + New client secret option.
- This action displays an Add a client secret sliding screen on the right side of the page.
- Let’s add RD Secret under the Description text field.
- Select 24 months from the ‘Expires’ drop-down list.
- Click the Add button.
- This action adds the Value (Client secret).
Note: ‘Client secret’ and Object ID’ are blurred due to confidential data.
2. Establish workspace access from the Power BI portal to the Azure portal registered application:
- Let’s login to the Power BI web portal.
- Click the Workspaces from the left menu options to display all the workspaces.
- Let’s click Rightdata Power BI workspace.
- The user is navigated to Rightdata Power BI workspace session page.
- Click the Access option.
- An Access (Rightdata Power BI) sliding screen is displayed on the right side of the page.
Note: The user can search either by the registered ‘Azure Application Name’ or ‘AppID.’
- Let’s select RD Power BI For Document registered Azure Application.
- Select Member as a drop-down list.
- Click the Add button.
- This action gives workspace (Rightdata Power BI) access to the registered Azure Application (RD Power BI For Document).
Note: In a similar way, the user can give multiple workspace(s) access to any registered Azure Application(s).
- Finally, the user can use these parameters (client_id, client_secret, and Tenant_id) to establish a Power BI profile connection within the application.
Note: The user has to checkbox the ‘Use Tenant id’ to establish the Power BI profile connection using the above parameters.
Note: ‘Tenant_id’ is blurred due to confidential data.
3. Check the User.Read (Microsoft Graph) from the API permissions of the registered application in the Azure portal:
- Login to Azure web portal.
- Click the API Permissions from the left menu options for the created Azure Application (RD Power BI For Document).
- Expand Microsoft Graph (1).
Path: Home > Rightdata, Inc. > RD Power BI For Document > API Permissions > Microsoft Graph (1) > User.Read
4. Enable ‘Tenant Settings’ to allow service principals to use Power BI APIs:
- Login to the Power BI web portal.
- Click the horizontal ellipsis (…) option.
- Hover on Settings.
- Click the Admin Portal.
Path: … > Settings > Admin Portal
- The user is navigated to the Admin portal session page.
- Click the Tenant settings.
- Scroll down to Developer settings within Tenant settings.
- Expand Allow service principals to use Power BI APIs and enable it.
Path: Admin portal > Tenant settings > Developer settings > Allow service principals to use Power BI APIs > Enabled