Skip to main content

Steps

Creating Curator Connection to Power BI

Note: You will need details from your non-admin registered app and your admin registered app. See steps 1-3 above if you have not configured those yet. If your Curator license allows you to connect to Power BI, you can connect to it by following this process:
  1. Click the button at the top to create a new connection.
  2. From here, fill out the details under the Power BI Connection section, then click save. The first 3 fields need to be filled in, but the 2 admin fields are highly recommended because they will lead to a better overall experience.
    • Cloud Environment: Leave on Commercial (default) unless this tenant is hosted in a Microsoft US Government sovereign cloud (GCC, GCC High, or DoD). See US Government Cloud (GCC) Setup for details.
    • Client ID: “Application (client) ID” from the non-admin registered app (see Azure App Setup).
    • Tenant ID: “Directory (tenant) ID” from the non-admin registered app (see Azure App Setup).
    • Client Secret: “Client secret” value (again, not the client secret ID) from the non-admin registered app (see Azure App Setup).
    • Admin Client ID: “Application (client) ID” from the admin registered app (see Azure Admin App Setup).
    • Admin Client Secret: “Client secret” value (again, not the client secret ID) from the admin registered app (see Azure Admin App Setup).
  3. Refresh the page after saving and you should see a Power BI section show up in the left navigation.

Authentication Groups (optional)

Under the Authentication Groups section on the Power BI connection, you can control which Frontend Groups are sent through the Microsoft authentication flow. This is useful when only a subset of your users actually need Power BI access — skipping the Microsoft login for everyone else avoids unnecessary prompts for content they cannot view. The Authentication Group Mode toggle determines how the Frontend Groups list below it is interpreted:
  • Exclude listed groups from Microsoft authentication (default): Users in any listed group skip the Microsoft login flow. All other users go through it. Use this when most of your users need Power BI authentication and only a few groups should be excluded.
  • Only require Microsoft authentication for listed groups: Only users in a listed group are sent through the Microsoft login flow. All other users bypass it. Use this when only a small subset of your users need Power BI authentication.
If the Frontend Groups list is empty, the toggle has no effect — every user is sent through Microsoft authentication, matching the default Power BI behavior.

Validate a successful connection

  • The admin registered app connection was successful if the dropdowns in the backend under Power BI > Reports > Create a new report populate.
  • The non-admin registered app connection was successful if reports load in the frontend. Be sure to log out of the frontend and log back in fresh.
If you run into any issues, you can refer to the Troubleshooting Power BI Access documentation for help.