Creating an Azure App Registration for Power BI

Learn how to register an Azure Active Directory application for use with Power BI. A Microsoft Azure administrator must complete this task before Analytics Content Hub users can access Power BI content.

1. Go to https://portal.azure.com.
2. Sign in to Azure with an administrator account.
3. Select the Azure Active Directory menu option.
4. Select the App registrations menu option.
5. Click New registration.
6. In the Register an application window, enter a name for the application.
7. Select the required Supported account types option. Typically, Accounts in this organizational directory only is selected. However, this value varies based on the requirements of your installation.
8. The Redirect URI (optional) parameter allows Power BI to return to Analytics Content Hub during the authentication process.
   Important: This parameter is not optional.

   The value of this parameter should be, for example,https://Analytics_Content_Hub_servername:9443/Theia/oauth/authFinish. The drop-down value should be set to Web.
9. Click Register.
10. Select the API permissions menu option.
11. Click Add a permission.
12. Select the Power BI Service option.
13. For the What type of permissions does your application require? option, select Delegated permissions.
14. Select the following permissions by expanding each section.
    

    Note: If the Power BI Persistent Filters feature is required for use within Analytics Content Hub, the UserState.ReadWrite.All API permission is required.
15. Click Add permissions.
16. Optional: At the bottom of the API permissions window, click Grant admin consent for domain.com to bypass the content window for end users. Then click Yes.
17. Select Certificates & secrets.
18. Click New client secret.
19. Enter a Description and select Never for the expiry.
20. Click Add.
21. Take note of the value, as it will be used in Analytics Content Hub (as appSecret) to establish the connection to Power BI.
    Tip: You must record this value for your reference because it will not be visible again. If you lose the appSecret value, create a new appSecret by re-doing steps 18-20.