# Embedded Capacity Configuration

{% hint style="info" %}
Before starting ensure the following

* You have **administrative access** to your Microsoft Azure tenant.
* An existing Power BI Embedded Capacity is already set up in Azure. (And that you have admin-level access.)
* You have permission to configure security groups and app registrations.
  {% endhint %}

### Create a Security Group in Azure

* Navigate to the Microsoft Azure portal: <https://portal.azure.com>
* Create a new security group that will be used to control access for your Power BI Embedded capacity.

<figure><img src="/files/7W9l1Tfbg5wVHdpa7lL8" alt=""><figcaption></figcaption></figure>

## Creating the Power BI Capacity

Navigate to Azure and select the Power BI embedded icon or search for it on the search bar

<figure><img src="/files/kWm814ZHLycoURAvDWNg" alt=""><figcaption></figcaption></figure>

Select the create button to create a PowerBI embedded capacity you want to use.

<figure><img src="/files/h9qaocb4OaLFX4bQsJou" alt=""><figcaption></figcaption></figure>

&#x20;Select the Subscription and Resource Group that the capacity will run on as well as the Location of the Server&#x20;

Create the Capacity

<figure><img src="/files/2AkMAsmXTDxxG9rccoJJ" alt=""><figcaption></figcaption></figure>

### Create an App Registration for Power BI Capacity&#x20;

In the Azure portal, create a new app registration.

<figure><img src="/files/gI6541fU10yMIaooJghP" alt=""><figcaption></figcaption></figure>

### App Registration&#x20;

Provide a name for the app and select the **'Accounts in any organizational directory'** option.

<figure><img src="/files/94HE2AR7Ar9R4kzdjIDC" alt=""><figcaption></figcaption></figure>

### Important Information

* Note the following details:
  * **Application (Client) ID**
  * **Directory (Tenant) ID**

<figure><img src="/files/Auw7Go2Bg4lqgu4KMMHJ" alt=""><figcaption></figcaption></figure>

### Secret Value

Create a new token and secret. Be sure to note the **Secret Value**, as it will only be shown when created.

<figure><img src="/files/92wGLXWG4au9sOUOnRc1" alt=""><figcaption></figcaption></figure>

### Add the App Registration to the Security Group

Add the newly created app registration to the security group you created earlier.

<figure><img src="/files/tXbEoBYpLPMmPFvgnyWD" alt=""><figcaption></figcaption></figure>

### Grant Access to the Security Group on Power BI Embedded Capacity

Select your existing **Power BI Embedded Capacity** in Azure.

<figure><img src="/files/bZHYPQqHHo64oi2g2iR8" alt=""><figcaption></figcaption></figure>

### Add Security Group

Add the security group as a **contributor** to the capacity.

<figure><img src="/files/Na3yBKzLwseNgDUwnpP0" alt=""><figcaption></figcaption></figure>

### Assign your workspace to your Embedded Capacity

Go to the Power BI portal: <https://app.powerbi.com>&#x20;

Navigate to the workspace settings of the workspace you wish to link.

<figure><img src="/files/3eYQdPHLft3tNUbnRssQ" alt=""><figcaption></figcaption></figure>

Ensure that the workspace is **linked to the embedded capacity** in Azure.

<figure><img src="/files/NKfMeIT3qJvaXyBfQ10j" alt=""><figcaption></figcaption></figure>

Ensure the **License Capacity** is pointing to the correct embedded instance.

<figure><img src="/files/r0DMT5KlxuKY1U0IEQUQ" alt=""><figcaption></figcaption></figure>

Enable **Developer Mode** if it's not already enabled.

<figure><img src="/files/U6BM2xLw0qcIpqu7vFEV" alt=""><figcaption></figcaption></figure>

### Developer Settings&#x20;

Navigate to **Developer Settings** under Admin Portal.

<figure><img src="/files/vX6gzaENUrNDmQcJn0Oo" alt=""><figcaption></figcaption></figure>

Enable the **Developer Settings**

<figure><img src="/files/3gRyWNIIURiH4WCl7T2e" alt=""><figcaption></figcaption></figure>

Enable the ‘Service principals can use Fabric API’ setting for the newly created security group.

<figure><img src="/files/Q9eUaGXwq7WjC86CuOsd" alt=""><figcaption></figcaption></figure>

### Grant Access to the Security Group on Power BI Workspace <a href="#grant-access-to-the-security-group-on-power-bi-workspace" id="grant-access-to-the-security-group-on-power-bi-workspace"></a>

Go to the Power BI portal: [https://app.powerbi.com](https://app.powerbi.com/)

Navigate to the workspace settings of the workspace you wish to link.

<figure><img src="/files/HiS61iqdmlrcLPzXElYT" alt=""><figcaption></figcaption></figure>

Here, you can effectively manage and control user access or permissions by adding the app registration (service principal) and security groups

<div align="left"><figure><img src="/files/JF9QT5ofrU7C2oFdPntH" alt=""><figcaption></figcaption></figure></div>

### **Retrieving the Workspace ID**

* Navigate to the **Admin Portal** and go to the **Workspaces** section, where all your workspaces are listed.&#x20;
* &#x20;Locate the specific workspace you wish to use. Hover over the workspace name to reveal more options.&#x20;
* Click the three vertical dots (ellipsis) on the left-hand side of the workspace. From the dropdown menu, select **Details**.

<figure><img src="/files/cCwr1DE1rT74vlokZQEb" alt=""><figcaption></figcaption></figure>

### Retrieve the Workspace ID

A panel will appear on the right side of the screen. Here, you'll find the **Workspace ID**, a unique combination of numbers and letters.

<figure><img src="/files/mlrRG7ZFPutpHVyIPRZ6" alt=""><figcaption></figcaption></figure>

### Necessary Details

Once setup is complete, provide the following details to the BI Portal team for final integration:

* Application (Client) ID
* Directory (Tenant) ID
* Secret Value
* Workspace ID

### Need Assistance?&#x20;

Stuck or have a question? No worries—we’ve got you covered! Click the link below, and our expert support team will help you out. Whether it’s a quick question or a more complex issue, we’re here to get you back on track in no time!

{% embed url="<https://www.biportal.co.za/support>" %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.biportal.co.za/advanced-settings/embedded-capacity-configuration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
