Skip to main content

​
Steps

  1. Azure Registered App Setup
  2. Azure Admin Registered App Setup
  3. Power BI Workspace Access
  4. Curator Connection

​
Creating a registered app for the admin API within the Azure Portal

This will be a very similar process to creating the non-admin registered app in the previous step, but this registered app will be used for authentication to the read-only Power BI Admin API for Curator to be able to check permissions, etc. on behalf of Power BI users.
  1. Log in to the Azure Portal;
  2. Search for “App Registrations” to start the process. You may also find them inside the Microsoft Entra ID > Manage > App Registrations.
  3. Click the button to register a new application.
  4. Add a distinct and descriptive name. It’s suggested to clarify that this is for the Admin API (e.g. “Curator Power BI Admin API App”).
    • You should skip the “Redirect URI” step for this registered app as it will not be used.
      Make sure to create this app registration under the same Azure tenant as the non-admin registered app created previously.
  5. Once the app is registered, make note of the following details from the “Overview” page as you will need them when setting up the configuration on Curator:
    • Application (client) ID - This will be used as the Admin Client ID in Curator.
    • Directory (tenant) ID - This should be the same as the tenant ID used for the registered app.

​
API Permissions

Do not add any API permissions to this registered app. It does not need permissions assigned in order to access the read-only admin APIs, and in fact adding them will actually prevent it from being able to access those APIs.

​
Create a Client Secret

  1. While still viewing the admin registered app, click on Manage > Certificates & secrets in the left navigation.
  2. Click the button to add a new client secret. This will be used as the Admin Client Secret in Curator.
  3. Fill in the description and adjust the expiration date as desired, and click the save button.
  4. Copy the client secret value and document it in a secure place.
    You will not be able to retrieve the value again once you leave this screen.
    Do not confuse this with the Secret ID. Curator must have the secret value to authenticate.