In This Article

Overview

Create App Registration in Azure Portal

Collect Essential Identifiers

Generate Client Secret

Configure API Permissions

Set Up Service Account

Configure PowerBI Tenant Settings

Configuration Summary

Next Steps - Implementation


Overview

You can embed a PowerBI dashboard published to the PowerBI service into your WiredUp application. To achieve this, you will require:

  • App Registration in Azure Active Directory
  • Proper API permissions for PowerBI access
  • A service account with appropriate licenses and workspace access
  • Configuration of PowerBI tenant settings

These requirements will ensure that a secure bridge is created between your PowerBI content and your WiredUp system.


Create App Registration in Azure Portal

Step 1: Access Azure Portal

  1. Navigate to portal.azure.com
  2. Sign in with your administrative account
  3. Search for "Azure Active Directory" or "Microsoft Entra ID" in the search bar
  4. Select "App registrations" from the left navigation menu

Step 2: Register New Application

  1. Click "+ New registration" button
  2. Enter application details: 
    • Name: Preferred name for this app registration
    • Supported account types: "Accounts in this organizational directory only"
    • Redirect URL: Leave blank for now (can be added later if needed)
  3. Click "Register" to create the application

Collect Essential Identifiers

After creating the app registration, you will need to collect several important identifiers:


Identifier Type

Location

Example Format

Client ID (Application ID)

App Registration Overview page

12345678-1234-1234-1234-123456789012

Tenant ID (Directory ID)

App Registration Overview page

87654321-4321-4321-4321-210987654321

Client Secret

Generated in next step

abc123XYZ789~secretstuff


Generate Client Secret

  1. In your app registration, click "Certificates & secrets" in the left menu
  2. Under "Client secrets" section, click "+ New client secret"
  3. Provide a description: "PowerBI Embedding Secret"
  4. Select expiration period: "24 months" (recommended)
  5. Click "Add"
  6. IMMEDIATELY copy the "Value" field - this is your Client Secret


Warning: The secret value will not be visible again after you navigate away

Configure API Permissions

Step 1: Add PowerBI Service Permissions

  1. Click "API permissions" in the left navigation menu
  2. Click "+ Add a permission"
  3. Select "Power BI Service" from the list
  4. Choose "Delegated permissions"
  5. Select the following permissions:
    • Dataset.Read.All - Read all datasets
    • Report.Read.All - Read all reports 
    • Workspace.Read.All - Read all workspaces
  6. Click "Add permissions"
  1. Click "Grant admin consent for [Your Organization Name]"
  2. Click "Yes" in the confirmation dialog
  3. Verify that all permissions show green checkmarks with "Granted for [Organization]"

Set Up Service Account

Step 1: Create or Configure Service Account

Requirements for the service account:

  • Must be an account in your Azure Active Directory
  • Requires PowerBI Pro license (minimum)
  • Should NOT have Multi-Factor Authentication (MFA) enabled
  • Dedicated account recommended (not a personal user account)

Account Setup:

  1. Create new user in Azure AD or use existing dedicated account
  2. Assign PowerBI Pro license
  3. Set a strong password
  4. Disable MFA for this account (embedding requirement)

Step 2: Grant Workspace Access

  1. Navigate to app.powerbi.com
  2. Locate the workspace containing your dashboard
  3. Click the three dots (...) next to the workspace name
  4. Select "Access" from the menu
  5. Add your service account with "Member" or "Admin" role
  6. Click "Add" to save the permissions

Configure PowerBI Tenant Settings


Note: This step requires PowerBI Administrator privileges


  1. Navigate to PowerBI Admin Portal (admin.powerbi.com)
  2. Go to "Tenant settings" in the left menu
  3. Scroll to "Developer settings" section
  4. Enable "Embed content in apps"
  5. Configure the setting to apply to:
    • Your service account, OR
    • A security group containing your service account
  6. Click "Apply" to save changes

Configuration Summary

You will need the following information for your application configuration:


Configuration Item

Description

Tenant ID

Your Azure AD tenant identifier

Client ID

Your app registration application ID

Client Secret

The secret value generated for your app

Service Account Username

E-mail address of your PowerBI service account

Service Account Password

Password for your service account

Workspace ID

GUID of the PowerBI workspace (found in workspace URL)

Report ID

GUID of the specific report/dashboard to embed



Important Notes:
Client Secret is only visible once - save it immediately
The service account should be dedicated for PowerBI embedding only
Test all configurations in a development environment first
Document all IDs and configurations for your development team



Next Steps - Implementation

Once the setup for embedding a PowerBI report has been completed, you can proceed to integrating the report to your WiredUp system. For more information, please refer to this article: Integrating PowerBI into WiredUp - Part 2