Power BI

Introduction

Zuar Portal's Power BI Report Block uses Power BI's REST API. To configure Portal to access to your Power BI, we need to obtain an Entra ID (formerly Azure Active Directory) application and grant the necessary pernissions.

Obtain Entra ID credentials

1. Login to Azure.
2. Search for App registrations and then choose it from the listed Services.
3. Choose New registration to create a new application.
4. Enter the application Name, select the appropriate option under Supported account types, under Redirect URI select Single-page Application (SPA) and enter your Zuar Portal domain (e.g. https://customer.zuarbase.net). Finally, click Register.
5. Choose API permissions in left sidebar. Then click + Add a permission.
6. Select Power BI Service.
7. Click Delegated permissions, and select required permissions below.
8. Click Application permissions, and select required permissions below.
9. Click Add permissions.
10. Click Grant admin consent for .... There should be green checkmarks in the Status column for each row.
11. Click Certificates & secrets in the left sidebar. Click + New Client secret.
12. Enter a Description and select an appropriate Expires date, then click Add.
13. Click the copy icon next to the Value and save it. This is our Client secret value and we will need it later.
14. Click Overview in the left sidebar, then collect next values, Application (client) ID, Directory (tenant) ID.

Grant permissions in Power BI

1. Login to Power BI as an admin.
2. Click the cog icon in upper-right corner and click Admin portal.
3. Go to Tenant settings on the left sidebar. Under the Developer settings section, expand Allow service principals to use Power BI APIs and toggle this option to be Enabled. Set Apply to: to The entire organization to allow all AAD Applications with proper permissions to access Power BI resources. If you want to allow only specific AAD Applications refer to How to grant permissions in Power BI for a specific security group.
4. In order to allow the AAD Application access to Workspaces, add the application to the Workspace's access list. Click Workspaces icon in left-most sidebar.
5. Click three-dot icon next to the Workspace, and then click Workspace access
6. Enter the exact name of the AAD Application and select it from dropdown. Ensure the user is added as a "Member" (or higher) Permission and click Add.
7. Repeat these steps for any additional Workspaces that Zuar Portal should access.

Grant permissions in Power BI to a specific security group

We'll create an Azure Security Group and add our AAD Application to the group.

1. Login to Azure.
2. Search for Groups and select it from the results under Services.
3. Click New group.
4. Set Group type to Security, enter Group name, and add the AAD Application as Owner and Member. Click Create.
5. In Power BI, search for Developer settings, expand Allow service principals to use Power BI APIs, set to Enabled, and set Apply to: to Specific security groups, enter name of newly created security group. Click Apply changes`.
6. Click Workspaces icon in left sidebar.
7. Click three-dot icon next to your Workspace, then click Workspace access
8. Enter security group name, select "Member", then click Add.

Portal Power BI Integration

To connect you Power BI instance to the Portal you can use Admin's Integrations section.

1. Enable Power BI integration
2. Click on ThoughtSpot credentials field to open dropdown and click + Create New Credentials
3. In modal fill Client ID, Client Secret, Tenant ID fields and click Save
4. This is it! Your Power BI integration is complete.