Power BI Setup Guide

Power BI Setup Guide

Prerequisites

• Admin access to Microsoft Entra ID (formerly Azure AD).
• Admin access to Microsoft Fabric (formerly Power BI Admin Portal).

Setup Guide

Step 1: Create an Azure App

1. Open the Azure Portal and sign in.
2. Search for App registrations and select it.
3. Click New registration.
4. Fill in the required information:
   • Name: Enter "Matia"
   • Supported account types: Leave the default value — "Accounts in this organizational directory only (Single tenant)"
   • Redirect URI: Leave empty
5. Click Register.
6. From the Overview page, copy the Application (client) ID and Directory (tenant) ID. Store them securely — you will need them in Step 5.
7. Click Certificates & secrets in the left menu.
8. Under Client secrets, click + New client secret.
9. Enter a description (e.g., "Secret used to connect Matia to Microsoft Power BI"), select an expiry time, and click Add.
10. Copy the client secret Value and store it securely — you will need it in Step 5.

---

Step 2: Create a Security Group in Microsoft Entra ID

1. Open the Azure Portal and sign in.
2. Search for Microsoft Entra ID and select it.
3. Under the Manage section, click Groups.
4. Click New group.
5. Fill in the required information:
   • Group type: Security
   • Name: Power BI - API Access
   • Group description: Enter any description or leave empty (e.g., "Security group to grant API access")
6. Click No members selected to open the member drawer. Search for the Matia app you registered in Step 1 and select it. Click Select to confirm.
7. Click Create.

---

Step 3: Enable the Power BI Service Admin Settings

1. Open the Power BI Admin Portal and sign in.

2. Click Tenant Settings in the left sidebar.

3. Under Developer settings, expand Service principals can call Fabric public APIs:

   • Set to Enabled.
   • Under Specific security groups, add the security group you created in Step 2.
   • Click Apply.

4. Under Admin API settings, repeat the following for each of these three sections:

   • Service principals can access read-only admin APIs
   • Enhance admin APIs responses with detailed metadata
   • Enhance admin APIs responses with DAX and mashup expressions

   For each: expand the section, set to Enabled, add the security group from Step 2, and click Apply.

---

Step 4: Add the Azure App to Your Workspace

1. Open Power BI and sign in.
2. Find the workspace you want to connect, click the three-dot menu, and select Workspace access.
3. Click + Add people or groups.
4. Search for the app you created in Step 1 (i.e., Matia) and select it. Set the permissions to Contributor.
5. Click Add and close the drawer.
6. Repeat for all workspaces you want to make available in Matia.

Important: If any Power BI reports use Semantic Models from other workspaces, add the Matia app as a Contributor to those workspaces as well. This is required to ingest report metadata and generate column-level lineage.

---

Step 5: Complete Configuration in Matia

1. Enter the Client ID, Client Secret and Tenant ID
2. Enter an Asset Name.
3. (Optional) Enter a Description.
4. (Optional) Assign Tags.
5. Select an Owner.
6. Verify that your Power BI account is successfully connected by clicking on Test Connection.
7. Click Connect.