Power BI

Developer in a Day
Lab 03A – June 2022 release

Set up permissions

© 2022 Microsoft. All rights reserved.

Overview
The estimated time to complete this lab is 15 minutes.

In this lab, using the Azure portal, you will create a security group, register an app, create an app client
secret, and then add the app to the security group. Using the Power BI service, you will enable the
setting to allow service principals to use Power BI APIs and then grant admin access to the members of
the security group.

PowerBIDevIAD: Lab 03A © 2022 Microsoft. All rights reserved. 2

Exercise 1: Set up permissions
In this exercise, you will configure permissions to enable embedding Power BI content in an app.

Task 1: Record the Tenant ID

In this task, you will record the Tenant ID.

1. Switch to the Azure portal (web tab opened in Lab 00A).

2. In the home page, in the Manage Azure Active Directory section, select View.

3. Notice the details in the Basic Information section.

PowerBIDevIAD: Lab 03A © 2022 Microsoft. All rights reserved. 3

4. To copy the Tenant ID value, select the copy-to-clipboard icon to the right of the value.

5. Paste the value into the MySettings.txt file, besides Tenant ID.

6. Save the MySettings.txt file.

Task 2: Create a security group

In this task, you will create a security group.

1. In the left pane, select Groups.

2. To create a group, select New Group.

PowerBIDevIAD: Lab 03A © 2022 Microsoft. All rights reserved. 4

3. In the Group Name box, enter Power BI Apps.

Important: You must enter the name exactly as written, other the automation script you will run in
Lab 07A will fail.

4. At the bottom-left, select Create.

5. At the top-right, to close the groups interface, select X.

Task 3: Register an app

In this task, you will register an app that represents the identity of the app that you will develop later.

1. In the left pane, select App Registrations.

2. To create an app registration, select New Registration.

PowerBIDevIAD: Lab 03A © 2022 Microsoft. All rights reserved. 5

3. In the Name box, enter Sales Reporting.

4. At the bottom-left, select Register.

5. When the app is registered, hover the cursor over the Application (Client) ID unique identifier
value.

A copy-to-clipboard icon will appear.

6. To copy the ID to the clipboard, select the icon that appears.

7. Paste the value into the MySettings.txt file, besides Client ID.

8. Save the MySettings.txt file.

PowerBIDevIAD: Lab 03A © 2022 Microsoft. All rights reserved. 6

Task 4: Create a client secret
In this task, you will create a client secret, which will be used to sign in as the application.

1. In the left pane, select Certificates & Secrets.

2. To create a client secret, in the Client Secrets section, select New Client Secret.

3. In the Add a Client Secret window, select Add.

Important: After adding the client secret, the value of the client secret is displayed. You must
immediately copy the key value because it’s not possible to retrieve it later. Your app will use the key
value with the application ID to sign in as the application.

4. To copy the client secret value (not the secret ID) select the copy-to-clipboard icon to the right of
the value.

5. Paste the value into the MySettings.txt file, besides Client Secret.

PowerBIDevIAD: Lab 03A © 2022 Microsoft. All rights reserved. 7

6. Save the MySettings.txt file.

Now all the settings needed to embed Power BI content have been recorded in this file.

7. In the Azure portal, at the top-right, to close the groups interface, select X.

Task 5: Add the app to the group

In this task, you will add the app to the security group you created earlier.

1. In the left pane, select Groups.

2. In the list, select the Power BI Apps group.

3. In the left pane, select Members.

4. To add a member, select Add Members.

5. In the Add Members pane, inside the Search box, commencing typing the word Sales.

PowerBIDevIAD: Lab 03A © 2022 Microsoft. All rights reserved. 8

6. In the search result, select the Sales Reporting app.

7. At the bottom of the pane, select Select.

Task 6: Enable service principal

In this task, you will enable the tenant admin setting to allow service principals to use Power BI APIs.

1. Switch to the Power BI service (web browser).

2. At the top-right, select the Settings (cog) icon, and then select Admin Portal.

PowerBIDevIAD: Lab 03A © 2022 Microsoft. All rights reserved. 9

3. In the Admin Portal, in its left pane, select Tenant Settings.

4. In the list of tenant settings, scroll down to locate the Developer Settings section.

5. Expand open the Allow Service Principals to Use Power BI APIs setting.

6. Enable the setting.

PowerBIDevIAD: Lab 03A © 2022 Microsoft. All rights reserved. 10

7. In the security groups box, commence typing Power BI Apps, and then select the security group
when it is listed.

8. Select Apply.

Task 7: Assign workspace access

In this task, you will assign the Power BI Apps security group to the Sales Reports workspace.
Because the Sales Reporting service principal is a member of the security group, it effectively grants
permissions to access the workspace.

1. To open the workspace, in the Navigation pane, select the Sales Reports workspace.

2. If prompted that there unapplied tenant settings changes, select Apply All.

PowerBIDevIAD: Lab 03A © 2022 Microsoft. All rights reserved. 11

3. To configure workspace permissions, at the top-right, select Access.

4. In the Access pane, inside the first box, commence typing Sales, and then select the
Sales Reporting service principal.

5. In the dropdown list, select Admin.

6. Select Add (directly beneath the dropdown list).

7. At the bottom-right, select Close.

PowerBIDevIAD: Lab 03A © 2022 Microsoft. All rights reserved. 12

Summary
In this lab, using the Azure portal, you created a security group, registered an app, created an app
client secret, and then added the app to the security group. Using the Power BI service, you enabled
the setting to allow service principals to use Power BI APIs and then granted admin access to the
members of the security group.

PowerBIDevIAD: Lab 03A © 2022 Microsoft. All rights reserved. 13

Terms of Use
© 2022 Microsoft. All rights reserved.

By using this hands-on lab, you agree to the following terms:

The technology/functionality described in this hands-on lab is provided by Microsoft Corporation in a

“sandbox” testing environment for purposes of obtaining your feedback and to provide you with a
learning experience. You may only use the hands-on lab to evaluate such technology features and
functionality and provide feedback to Microsoft. You may not use it for any other purpose. Without
written permission, you may not modify, copy, distribute, transmit, display, perform, reproduce,
publish, license, create derivative works from, transfer, or sell this hands-on lab or any portion thereof.

COPYING OR REPRODUCTION OF THE HANDS-ON LAB (OR ANY PORTION OF IT) TO ANY OTHER
SERVER OR LOCATION FOR FURTHER REPRODUCTION OR REDISTRIBUTION WITHOUT WRITTEN
PERMISSION IS EXPRESSLY PROHIBITED.

THIS HANDS-ON LAB PROVIDES CERTAIN SOFTWARE TECHNOLOGY/PRODUCT FEATURES AND

FUNCTIONALITY, INCLUDING POTENTIAL NEW FEATURES AND CONCEPTS, IN A SIMULATED
ENVIRONMENT WITHOUT COMPLEX SET-UP OR INSTALLATION FOR THE PURPOSE DESCRIBED
ABOVE. THE TECHNOLOGY/CONCEPTS REPRESENTED IN THIS HANDS-ON LAB MAY NOT REPRESENT
FULL FEATURE FUNCTIONALITY AND MAY NOT WORK THE WAY A FINAL VERSION MAY WORK. WE
ALSO MAY NOT RELEASE A FINAL VERSION OF SUCH FEATURES OR CONCEPTS. YOUR EXPERIENCE
WITH USING SUCH FEATURES AND FUNCITONALITY IN A PHYSICAL ENVIRONMENT MAY ALSO BE
DIFFERENT.

FEEDBACK If you give feedback about the technology features, functionality and/or concepts
described in this hands-on lab to Microsoft, you give to Microsoft, without charge, the right to use,
share and commercialize your feedback in any way and for any purpose. You also give to third parties,
without charge, any patent rights needed for their products, technologies and services to use or
interface with any specific parts of a Microsoft software or service that includes the feedback. You will
not give feedback that is subject to a license that requires Microsoft to license its software or
documentation to third parties because we include your feedback in them. These rights survive this
agreement.

MICROSOFT CORPORATION HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS WITH REGARD
TO THE HANDS-ON LAB, INCLUDING ALL WARRANTIES AND CONDITIONS OF MERCHANTABILITY,
WHETHER EXPRESS, IMPLIED OR STATUTORY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND
NON-INFRINGEMENT. MICROSOFT DOES NOT MAKE ANY ASSURANCES OR REPRESENTATIONS WITH
REGARD TO THE ACCURACY OF THE RESULTS, OUTPUT THAT DERIVES FROM USE OF THE VIRTUAL
LAB, OR SUITABILITY OF THE INFORMATION CONTAINED IN THE VIRTUAL LAB FOR ANY PURPOSE.

DISCLAIMER This lab contains only a portion of new features and enhancements in Microsoft Power
BI. Some of the features might change in future releases of the product.

PowerBIDevIAD: Lab 03A © 2022 Microsoft. All rights reserved. 14