Embedded Capacity Configuration

This guide helps you link the BI Portal to your Power BI Embedded Capacity using Microsoft Azure, enhancing data access and management.

Before starting ensure the following

  • You have administrative access to your Microsoft Azure tenant.

  • An existing Power BI Embedded Capacity is already set up in Azure. (And that you have admin-level access.)

  • You have permission to configure security groups and app registrations.

Create a Security Group in Azure

  • Navigate to the Microsoft Azure portal: https://portal.azure.com

  • Create a new security group that will be used to control access for your Power BI Embedded capacity.

Creating the Power BI Capacity

Navigate to Azure and select the Power BI embedded icon or search for it on the search bar

Select the create button to create a PowerBI embedded capacity you want to use.

Select the Subscription and Resource Group that the capacity will run on as well as the Location of the Server

Create the Capacity

Create an App Registration for Power BI Capacity

In the Azure portal, create a new app registration.

App Registration

Provide a name for the app and select the 'Accounts in any organizational directory' option.

Important Information

  • Note the following details:

    • Application (Client) ID

    • Directory (Tenant) ID

Secret Value

Create a new token and secret. Be sure to note the Secret Value, as it will only be shown when created.

Add the App Registration to the Security Group

Add the newly created app registration to the security group you created earlier.

Grant Access to the Security Group on Power BI Embedded Capacity

Select your existing Power BI Embedded Capacity in Azure.

Add Security Group

Add the security group as a contributor to the capacity.

Assign your workspace to your Embedded Capacity

Go to the Power BI portal: https://app.powerbi.com

Navigate to the workspace settings of the workspace you wish to link.

Ensure that the workspace is linked to the embedded capacity in Azure.

Ensure the License Capacity is pointing to the correct embedded instance.

Enable Developer Mode if it's not already enabled.

Developer Settings

Navigate to Developer Settings under Admin Portal.

Enable the Developer Settings

Enable the ‘Service principals can use Fabric API’ setting for the newly created security group.

Grant Access to the Security Group on Power BI Workspace

Go to the Power BI portal: https://app.powerbi.com

Navigate to the workspace settings of the workspace you wish to link.

Here, you can effectively manage and control user access or permissions by adding the app registration (service principal) and security groups

Retrieving the Workspace ID

  • Navigate to the Admin Portal and go to the Workspaces section, where all your workspaces are listed.

  • Locate the specific workspace you wish to use. Hover over the workspace name to reveal more options.

  • Click the three vertical dots (ellipsis) on the left-hand side of the workspace. From the dropdown menu, select Details.

Retrieve the Workspace ID

A panel will appear on the right side of the screen. Here, you'll find the Workspace ID, a unique combination of numbers and letters.

Necessary Details

Once setup is complete, provide the following details to the BI Portal team for final integration:

  • Application (Client) ID

  • Directory (Tenant) ID

  • Secret Value

  • Workspace ID

Need Assistance?

Stuck or have a question? No worries—we’ve got you covered! Click the link below, and our expert support team will help you out. Whether it’s a quick question or a more complex issue, we’re here to get you back on track in no time!

Last updated