¶ 1. Abstract
The manual provides detailed instructions on how to configure Power BI authentication to work without the need for a username and password. It describes the necessary parameters to be configured in T6 Planning UX, as well as the steps to set up App Registration, add a Secret to the App Registration, link the App Registration to a Security Group in Azure, and configure Workspace access. Additionally, the manual guides on how to find and use the Tenant ID in Azure. These configurations enable Power BI to be authenticated and access data without requiring manual user authentication.
¶ 2. Configurations
¶ 2.1 Overview
To enable Power BI authentication without a username and password, several parameters need to be configured in T6 Planning UX, and settings need to be adjusted in both Power BI and Azure.
¶ 2.2 Configuring Parameters
The table below shows the configuration of parameters and their respective values:
| Parameter | Value |
|---|---|
| PowerBIIntegration | S |
| PowerBIUser | |
| PowerBIPassword | |
| PowerBIClientID | e617b6f4-28fe-44df-8484-f38295792e12 |
| PowerBIClientSecret | -74b2a8_dg6-_oajI6Gqw~As_PrsqPPZ94 |
| PowerBIGroupId | d60bd0fe-f98c-425c-9183-4c3a440d72be |
| PowerBIURLApi | https://api.powerbi.com/ |
| PowerBIURLAuthority | https://login.microsoftonline.com/{0} |
| PowerBIURLResource | |
| PowerBIUseRLS | N |
| PowerBIURLADFS | |
| PowerBITenantId | b29a9b64-6c73-483a-8413-2e2dcdc8a757 |
¶ 2.3 Configuring Power BI Authentication
The process of configuring Power BI authentication (without a username and password) takes place in both Power BI and the Azure portal.
The first step involves App Registration. To begin this process on the Power BI homepage:
- Register an app with the necessary Power BI permissions.
- This process can be done in various ways, but it is recommended to configure it through the link https://app.powerbi.com/apps (this way, the required permissions will be automatically configured).
- The generated ID should be used in the parameter: PowerBIClientID.
The second step involves adding a Secret to the previously created App Registration. To do this, in the Azure portal:
- Locate the previously created App Registration and add a secret to it. The secret is the associated password. This secret allows permissions for Power BI operations.
- This App Registration will be identified as a Service Principal.
- The generated secret should be used in the parameter: PowerBIClientSecret.
The following screens illustrate this step-by-step process.
The third configuration step involves the Security Group. In Azure:
- Create a Security Group and link the App Registration to it. This link is necessary for Power BI to understand which Tenant the information can be retrieved from using the Power BI API.
In the fourth step, return to Power BI to configure Tenant Settings. In this step:
- Enable permissions for the Azure Tenant through the Admin Portal.
The following image illustrates the configuration suggested by Microsoft to be a specific Security Group configured in the previous step. During development, we used the "The entire organization" option.
Continuing with the configuration of the fourth step, still in Power BI, it's time to configure Workspace access.
- Configure the Workspace you desire, so that Power BI APIs have access through the Service Principal.
- This Workspace access configuration will only be visible if it is configured as "Dedicated capacity".
- If it's not configured this way, follow the steps next to it until the icon appears:
- Changing the Workspace to "Dedicated capacity" will make the "Workspace access" option appear, as highlighted.
After configuring the Workspace and continuing with the fourth step, follow the steps below.
- In the text box in the Access tab, select the name of the App Registration created in the first step.
- Indicate whether you want access with the Member or Admin profile.
- Click Add to finalize.
In the fifth and final step, return to Azure to find the Tenant ID. To do this:
- Access the Azure Active Directory portal and locate the configured Tenant you want to use.
- Click the button to copy the Tenant ID to the clipboard.
- The Tenant ID should be used in the parameter: T6 Planning UX PowerBITenantId.
Note: Some Azure configurations may take up to 15 minutes to take effect.