You can configure Admin User or Service Principal authentication types to access Microsoft
Power BI. Before you configure the authentication, you need to set up your environment and get
the authentication details.
Configure access
To access Microsoft Power BI, follow these steps to set up your environment:
Configure a connection to the Microsoft Power
BI source system in Administrator.
Enable port 443 and configure your firewall
to allow traffic to pass over port 443. The Secure Agent uses port 443 to connect to the
internet.
If you use Service Principal authentication
to authenticate your organization to the Microsoft Power BI service, enable read-only
access to the Power BI admin API. For information about configuring service principal
for read-only admin APIs, see HOW TO: Configure Service Principal for Microsoft Power
BI.
In the
Admin API
settings
section of the Power BI admin portal, enable the option
Enhance admin APIs responses with DAX and mashup expressions
.
Whether you authenticate using the
administrator privileges or a service principal, enable Preview features for your
organization to extract metadata from a Microsoft Power BI source system. Additionally,
enable the enhanced metadata scanning feature to extract lineage from refreshed and
republished datasets in your Microsoft Power BI environment.
If you plan to connect Microsoft Power BI to
Microsoft Azure through a REST API with the administrator user role, perform the
following tasks:
Assign one of the following Power BI
administrator privileges to the administrator user role:
Microsoft 365 Global Administrator
Power BI Service Administrator
Obtain administrator access at the
workspace level.
Get authentication details
Ensure you get all the required authentication details based on the authentication method
you want to use:
Admin User
You need the client ID for your application registered in the Azure Active
Directory, user name, and password to connect to Microsoft Power BI instances.
Service Principal
You need the client ID, client secret, and tenant ID for your application registered
in the Azure Active Directory.