Power BI REST API calls - without storing ones username/password in the .pbix file

[varuos]

Hi All,

I have been trying to explore Power BI REST APIs recently. 

I want to call the Power BI REST APIs to gather organizational Power BI usage and other metrics.

Some of the blogs and YouTube videos I have come across, all show the following steps -

Step-1: Register an app in Azure AD

Step-2: Grant API Permission to the app

Step-3: Use Postman to generate a refreshable acces token

On Step-3, I see everyone is passing their username/password to make the call to REST API and to fetch the token.

That username/passoword lives inside the .pbix file and that's not the security best practice.

Do you have any suggestion or point me to a direction where I don't store the username/passowrd in the .pbix file.

Is there a better approach to achive this?

Thank You!

[lbendlin]

GitHub - migueesc123/PowerBIRESTAPI: A Microsoft Power BI Data Connector or Power Query Connector fo...  uses AAD Auth. No credentials are stored.