Register the Power BI Application with Azure

Register the Power BI application with Microsoft Entra ID (Azure Active Directory).

After you register the app, record the Application ID, Directory ID, and client secret. You will use these values when you add the application in Commvault.

Note

  • Disclaimer: This procedure uses the Microsoft Entra ID (Azure AD) portal, which may change without notice. See Azure Active Directory Documentation.

  • To improve security:

    • Create a Conditional Access policy to limit application access.

    • Rotate the client secret every 90 days in the Azure portal and update the value in the Command Center.

    • Delete old client secrets after rotation.

Sign in to the Azure Portal

  1. Go to https://portal.azure.com/ and sign in using a global administrator account.

  2. In the left navigation pane, click Microsoft Entra ID.

Register the Azure App

  1. In the navigation pane, click App registrations.

  2. Click New registration.

  3. In the Name box, enter a name for the application.

  4. Under Supported account types, select Accounts in this organizational directory only (single tenant).

  5. Under Redirect URI, enter the following value:

    https:///commandcenter/processAzureAuthToken.do

    This value is required to authorize and verify the Azure app from the Command Center.

  6. Click Register.

  7. Copy the following values and save them for later use:

    • Application ID

    • Directory ID

You will use these values when you add the Power BI application in Commvault.

Grant API Permissions

  1. In the navigation pane, click API permissions.

  2. Click Add a permission.

  3. Click Microsoft Graph, and then complete the following steps:

  4. Click Application permissions.

  5. Select the following permissions:

    • Microsoft Graph:

      • Directory: Directory.Read.All

      • Policy: Policy.Read.All

    • Power BI Service:

      • Capacity: Capacity.ReadWrite.All.

      • Dataset: Dataset.ReadWrite.All.

      • Report: Report.ReadWrite.All.

      • Tenant: Tenant.ReadWrite.All.

      • Workspace: Workspace.ReadWrite.All.

  6. Click Add permissions.

  7. On the app API permissions page, click Grant admin consent for your tenant.

Create a Client Secret

  1. In the navigation pane, click Certificates & secrets.

  2. Click New client secret.

  3. Enter a description, and then select Never expire.

  4. Click Add.

  5. Copy the client secret value and save it in a secure location.

    You will use this value when you configure the Power BI application in Commvault.

×

Loading...