Page Comparison

In order to connect WIP to Power BI we need to create an application registration in the Azure Entra ID

...

• on the service on my workspace (only me will modify)

• on the service on a shared workspace for collaborate editing

• on you desktop using th

Use Onboarding Embed Tool

Launch this URL: Onboarding Embed Tool (powerbi.com)

• choose the second option: Embed Power BI for your organization's internal users—for enterprises

...

Image Removed

Image Removed

• Application Name : you can use “WIPApp”

• Home page url and Redirect URL : use your WIP external URL

Image Removed

Embed Power BI content in an embedded analytics application with service principal and an application secret - Power BI | Microsoft Learn

...

• WIP Desktop App

Create Application Registration

...

• Go to your Microsoft Azure console / Entra ID / App Registrations

• + Add / App Registration

Image Removed

...

• New registration

• Image Added

• Name : your application name (service principal name also)

• Redirect Url : Web + where to redirect after azure authentication = WIP external URL

Press Register.

Api Permissions

Once created go to API Permissions and use “+Add a permission “ permission“ to add permissions like below from

...

Image Added

• Microsoft Graph (import users)

...

Image Removed

...

• • User.Read

• Power BI Service

  • Application permissions (Admin consent required)

    • Tenant.ReadWrite.All

  • Delegated Permissions

    • Connection.ReadWrite.All

    • Dataset.ReadWrite.All

    • Gateway.ReadWrite.All

    • Item.ReadWrite.All

    • PaginatedReport.ReadWrite.All

    • Report.ReadWrite.All

    • SemanticModel.ReadWrite.All

    • Workspace.ReadWrite.All

After adding the permissions you our a active directory admin should press the button “Grant Admin Consent for …“ in order to validate the Status to Granted for your company

The app permissions should look like this after:

...

Screen Recording 2025-01-08 at 10.18.48.mov

Assign Service Principal to Workspaces manually

You need to assign the service principal (registered application) you just created to all workspaces you want to control with WIP (my workspaces is not necessary as they will be accessed using the login user)

You can do it manually for each workspace or you can do it in the admin portal

...

Assign Service Principal to Workspaces in Admin Portal

...

Add service principal to fabric administrative group

...

You need to add your service principal to a group (that you might create) having assigned roles = “Fabric Administrator”

Connect WIP to Power BI

In WIP create a new Power BI Server

Image Added

Fill the WIP Power BI server fields client and tenant ID according to the information in the overview section of your application.

...

For the Secret key, generate a client secret and copy the value to Secret key

Image Added

Then press the test power bi server button to check if the configuration is correct.

Known Errors

The caller is not authenticated to access this resource Status: 401 (Unauthorized) 

• Add the service principal to a group having assigned roles = “Fabric Administrator”

Authenticate issue, invalid_request,AADSTS9002327: Tokens issued for the 'Single-Page Application' client-type may only be redeemed via cross-origin requests.

• In platform configuration ensure you have a web application and one redirect to WIP url not a single page application…

Install WIP Desktop app for Power BI

You can install WIP desktop application that will help to check in and out Power BI application to your local machine and edit them in Power BI Desktop

1. Download WIP Desktop from ebiexpertssupport download section WIP Desktop for Power BI, WIP Addons for SAP and QlikView

2. Launch the installer

Image Added

Image Added

At this stage you need to configure the WIP Desktop to connect the WIP Web Server, go to the installation location C:\Program Files\ebiexperts WIP Desktop by default,

edit the “appsettings.Production.json” file,

{
  "AzureAd": {
    "TenantId": "4bdd06f5-b479-4330-8b6d-3d5e3d4689c4",
    "ClientId": "72195396-b37b-4783-91bb-e9845f6ad6e5"
  },
  "WipApiUrl": "https://localhost:59279/",
  "WipLoginEnvironmentId": "310",
  "Serilog": {
    "MinimumLevel": {
      "Default": "Verbose",
      "Override": {
        "Microsoft": "Verbose",
        "System": "Verbose"
      }
    }
  }
}

• AzureAd.TenantID : the tenant ID from the azure application registration

• AzureAd.ClientId : the client ID from the azure application registration

• WipApiUrl : the wip server url

• WipLoginEnvironmentId : the wip login environment id,

Image Added