Forum Discussion
JibinSebastian
Advocate II
Advocate IIService Principal for Semantic model Refresh Issue
Hi All, We are trying to set up a service principal for semantic model refresh. We have created the service principal ID, a security group, and added the service principal to all the required worksp...
You would have to enter the Application (Client) ID of the Azure AD app registration you created (not the object ID).
This is exactly what “Service principal ID” refers to in the UI.So you should have:
- Tenant ID = Directory ID from Azure AD
- Service Principal ID = Application (Client) ID
- Service Principal Key = the client secret under Certificates & secrets
Your tenant admin who has created the service pricipal SPN for you should have shared the client secret already.
Hope this helps - please appreciate by leaving a Kudos or accepting as a Solution!
Ray_Minds
Solution Supplier
Solution SupplierAnswer :
1. Azure AD / Entra ID setup
App Registration should be have configure like below bcz its most confusing part which we need to make sure for correct way
Application (client) ID = Service Principal ID
Directory (tenant) ID = Tenant ID
Client Secret = use the secret VALUE, not the secret ID
Note : Allow Power Bi Api read-Write permission to this service Principal
2. Now we have to make some Tenant setting changes in Power Bi service
* Fabric / Power BI tenant admin must enable:
* Allow service principals to use Fabric / Power BI APIs
Steps:
1) Power BI Admin Portal
2) Tenant settings
3) Developer settings
4) Allow service principals to use Power BI APIs
Note : If this is disabled, service principal auth will always fail.
3. Workspace permissions in Power Bi Service :-
The service principal must be added to the workspace as Contributor (minimum) Or Member or Admin but not Read because it won't work to refresh the Datasets