permissions for getting input from stream analytics..

[Naboo1020]

Hi All,

we have a config where Azure Stream Analytics sends data to PowerBI Service - everything works fine with global azure admin credentials (having PowerBI Pro lic). Now we want to change it to a "service account user" following the least priviledge principle - so there are two questions:

1) does this user need a powerbi pro lic? (must create a dataset while authorizing in stream analytics...)

2) what permissions need this user within the workspace in powerbi service? (is ok if it is "only" a member of workplace or should it be a admin?)

thanks for help in advance,

Markus

[v-shex-msft]

HI @Naboo1020,

#1.

No, 'Azure Stream Analytics' not mentioned it requests power bi account with pro license.

Prerequisites:

• An Azure account.
• An account for Power BI. You can use a work account or a school account.

#2.

It also not told us to use admin account, so I think normal member power bi account will suitable for this requirement.

Reference link:

Real-time streaming in Power BI

Stream Analytics and Power BI: A real-time analytics dashboard for streaming data

Regards,

Xiaoxin Sheng

[Naboo1020]

Hi,

thank you for reply and the information - i tried it in 2 versions:

1) serviceaccount without powerbi pro lic and without azure global admin permission (account is only a user in Azure AAD and has a powerbi free license)

2) serviceaccount with powerbi pro lic and without azure global admin permission

in both versions, if i start the StreamAnalytics Job, the SA job started and nothing happens, except there is a orange exclamation mark in the output section of SA Job saying: "Could not connect to Power BI service endpoint." - if i change it to my global admin account everything works fine...

thanks for help.

br, Markus

[v-shex-msft]

Hi @Naboo1020,

Actually, you can use one account(it has azure license) to push azure streaming to another account(with base power bi license). 

Document hasn't said you need to finish these operations on one account.

Regards,

Xiaoxin Sheng

[Naboo1020]

Hi,

sorry i dont understand your answer - my problem is:

• with azure global admin permissions output to PowerBI will work
• with azure standard user permissions output to PowerBI will NOT work (cannot connect to PowerBI endpoint)

so the question is: 

What azure permissions a user need to connect StreamAnalytics and PowerBI?

br, Markus

[v-shex-msft]

HI @Naboo1020,

>>sorry i dont understand your answer

I would like to share you some detail description of my suggestion.
1. Your global admin has setting an azure streaming job, then allow others to use created job to push data.
2. After these operations, other users(not have global admin permission) can create a streaming analysis based on shared streaming job to push data to streaming api.

In summary, I told that you can use normal azure account to push data to power bi streaming api.

Hope above can help you clarify my opinion.

Regards,

Xiaoxin Sheng