In order to connect WIP to Power BI we need to create an application registration in the Azure Entra ID
WIP will connect to this application that will act as a service principal in PowerBI
We need to add the application / service principal to each workspace / workspace WIP will publish, to be able to add / publish items
WIP is able to rebind report to any destination dataset during the publish phase
WIP is able to remap semantic model datasources during the publish phase
Checkout can be done:
on the service on my workspace (only me will modify)
on the service on a shared workspace for collaborate editing
on you desktop using th
Use Onboarding Embed Tool
Launch this URL: Onboarding Embed Tool (powerbi.com)
choose the second option: Embed Power BI for your organization's internal users—for enterprises
Application Name : you can use “WIPApp”
Home page url and Redirect URL : use your WIP external URL
Create Application Manually
Go to your Microsoft Azure console / Entra ID / App Registrations
+ New registration
Name : your application name (service principal name also)
Redirect Url : where to redirect after azure authentication = WIP external URL
Press Register.
Once created go to API Permissions and use “+Add a permission“ to add permissions
Microsoft Graph (import users)
User.Read
Power BI Service
Application permissions (Admin consent required)
Tenant.ReadWrite.All
Delegated Permissions
Connection.ReadWrite.All
Dataset.ReadWrite.All
Gateway.ReadWrite.All
Item.ReadWrite.All
PaginatedReport.ReadWrite.All
Report.ReadWrite.All
SemanticModel.ReadWrite.All
Workspace.ReadWrite.All
Assign Service Principal to Workspaces
You need to assign the service principal to all workspaces you want to control with WIP (my workspaces is not necessary as they will be accessed using the login user)
Add service principal to fabric administrative group
You need to add your service principal to a group (that you might create) having having assigned roles = “Fabric Administrator”
Known Errors
The caller is not authenticated to access this resource Status: 401 (Unauthorized)
Add the service principal to a group having assigned roles = Fabric Administrator”
Authenticate issue, invalid_request,AADSTS9002327: Tokens issued for the 'Single-Page Application' client-type may only be redeemed via cross-origin requests.
ssss
0 Comments