Microsoft Power BI

Microsoft Power BI is a business analytics tool for visualizing and sharing data insights across an organization.

Related Enforcement Actions:

• Microsoft Azure - Send Assets to Microsoft Power BI

Asset Types Fetched

This adapter fetches the following types of assets:

• Users, Groups, Compute Services

Data Retrieved from the Adapter

When the Fetch Tenant-Wide Inventory Using Read-Only Admin APIs connection parameter is enabled, the adapter retrieves workspaces and the users and dataflows returned with each workspace from the tenant-wide admin response.

Before You Begin

Authentication Methods

Authenticate the adapter using either of the following methods:

• Azure OAuth credentials
• Read-Only Admin APIs

APIs

Axonius uses the following APIs:

• Get Groups
• Get Group Users
• Get Dataflows

Required Permissions

• To connect with delegated permissions, you must register an Entra ID application with Power BI.
• The application requires the following delegated permissions: Power BI Service: Dataflow.Read.All and Workspace.Read.All.

Supported From Version

Supported from Axonius version 6.1

Generating the OAuth Authorization Code - Required for OAuth Authentication

To authenticate with OAuth, you must generate an OAuth Authorization Code for this adapter setup.

Generate the OAuth Authorization Code

1. Copy and paste the following URL into a browser window. Make sure to add the Tenant ID, Client ID, and Redirect URI that you used earlier in this setup and save the URL for later use:
   https://login.microsoftonline.com/TENANT/oauth2/v2.0/authorize?client_id=CLIENT_ID&scope=https://graph.microsoft.com/.default&redirect_uri=REDIRECT_URI&response_mode=query&response_type=code

2. Authorize, if required.

3. Copy the value for the code parameter in the changed URL. This is the entire string in the URL between code= and &session_state and it can be quite long.

   

4. Back in Axonius, paste the copied code into the Azure OAuth - Authorization Code field.
   Get the redirect URL:

   1. In Microsoft Azure, navigate to App Registrations and select your application for this integration.

   2. On the left panel, navigate to Manage > Authentication.

   3. In the Web area, copy one of the redirect URIs.

   4. Back in Axonius, paste the copied Redirect URI into the Azure OAuth - Redirect URI/Reply URL field.

      

Connecting the Adapter in Axonius

Require Parameters

1. Azure Tenant ID, Azure Client ID, Azure Client Secret, Cloud Environment - See details under Microsoft Entra ID.
2. API Type (default: Commercial) - Select the API type. When a government entity is selected, the data is sent to app.powerbigov.us for government use instead of app.powerbi.com.
3. Additional required parameters - depending on the authentication method:
   • For Azure OAuth Authentication:
     1. Azure OAuth - Authorization Code - The authorization code to connect to Microsoft Power BI. Learn how to generate the OAuth Authorization Code.
     2. Azure OAuth - Redirect URI / Reply URL - The location where the authorization server sends the user once the Azure has been successfully authorized and granted an authorization code or an access token. For more information, see Redirect URI (reply URL) restrictions and limitations.
   • For Read-Only Admin APIs:
     1. Fetch Tenant-Wide Inventory Using Read-Only Admin APIs - Enable this option to use client-credentials authentication and fetch tenant-wide workspaces, users, and dataflows. When this parameters is enabled, the Azure OAuth Authorization Code and Redirect URI / Reply URL are ignored, so there is no need to provide them.

Optional Parameters

1. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

2. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.

3. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

4. HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Related Enforcement Actions

• Microsoft Azure - Send Assets to Microsoft Power BI