# Pre-requisites for Power BI Registration

#### Before registering Power BI in TrustLogix, ensure you have the following:

#### **Licensing and Roles for Create Service Account**

* Ensure that the Power BI Semantic Models are configured to **Premium Per User, Premium Capacity,** or **Fabric Capacity** (refer to image)
  * Refer to **this** [**documentation** ](https://learn.microsoft.com/en-us/fabric/enterprise/powerbi/service-premium-connect-tools)for more detailed information
* The User creating the service principal in the following steps is assigned to a **Fabric Administrator** role

<figure><img src="https://815455107-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0SWnT1NcjBiPxnUvPcqE%2Fuploads%2FC26WWCrSF59RevGCKzcR%2Fimage.png?alt=media&#x26;token=a60ac68c-ea4e-484a-a4e4-205fde20055b" alt=""><figcaption></figcaption></figure>

#### **Power BI Service Settings (Admin Portal)**

* The following developer settings need to be enabled for the service principal to call Fabric Public APIs
  * If you would like only give access for a certain security group, please select the **Specific security groups** option below instead of The entire organization and assign the security group to that

<figure><img src="https://815455107-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0SWnT1NcjBiPxnUvPcqE%2Fuploads%2FQoLd76Ns1thZWrp7e3wb%2FScreenshot%202025-11-18%20at%207.57.28%E2%80%AFAM.png?alt=media&#x26;token=a5981541-1842-4ab1-ad3d-f5275f7c7cc2" alt=""><figcaption></figcaption></figure>

* Also enable the XMLA endpoint option to Read Write under Premium Per User
  * if using Premium Capacity, enable under that

<figure><img src="https://815455107-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0SWnT1NcjBiPxnUvPcqE%2Fuploads%2FaySoyS9qyieHRLTGcHf2%2Fimage.png?alt=media&#x26;token=023c6d78-fd7e-4d93-a24a-b8192de237cd" alt=""><figcaption></figcaption></figure>

#### **Azure AD Service Account**

* A **dedicated service account** (Azure Application) using Azure Application Registration that TrustLogix will use to connect to Power BI.
* Create App In Azure using App registration
  * Sign in to the Azure portal and browse to **Azure Active Directory** → **App registrations**
  * Click **New registration**
  * Create the application
    * **Name**: e.g. `TrustLogix-PBI`
    * **Supported account types**: choose **Accounts in this organizational directory only**
    * **Redirect URI**: leave blank (not needed for client‑credentials flow)
    * Click **Register**
* **Grant the API Permissions**
  * The application should have the following API Permissions on Power BI Service:
    * **Admin consent** to access Power BI APIs

<figure><img src="https://815455107-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0SWnT1NcjBiPxnUvPcqE%2Fuploads%2FwoQlPindU6OdD4NnwcVf%2FScreenshot%202025-11-18%20at%207.56.01%E2%80%AFAM.png?alt=media&#x26;token=073093e0-6786-44d7-a550-73543bc288ff" alt=""><figcaption></figcaption></figure>

* (Optional) If you would like to use TrustLogix for Group-Based policies in Power BI, please add the following permission as well

<figure><img src="https://815455107-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0SWnT1NcjBiPxnUvPcqE%2Fuploads%2FL3gw7xIl8sjAeFBeAuDN%2Fimage.png?alt=media&#x26;token=56bcb10b-7b6f-41e2-a111-ee882b93b98a" alt=""><figcaption></figcaption></figure>

* #### **Fetch Tenant ID and Client ID**
  * Obtain your **Tenant ID and Client ID using Application Overview Page**
    * The **Client ID** is available in **App Registration → Overview → Application (client) ID**
    * The **Tenant ID** is available in **App Registration → Overview → Directory (tenant) ID**
* #### **Fetch Client Secret**
  * **Generate a Client Secret under Application Overview Page → Manage → Certificates & Secrets**
    * Please make note of the expiry date of the Secret and update it as TrustLogix will not be able to auto update the Secret

#### **Workspace Assignment to the Service Account**

* The service account created above needs to be added to all workspaces that you would like TrustLogix to secure
  * Ensure that the service account is granted **ADMIN** level access to these workspaces
  * If you have added the service account to a security group, add the security group as an ADMIN instead

<figure><img src="https://815455107-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0SWnT1NcjBiPxnUvPcqE%2Fuploads%2FPySg0628uQCtGdq67EMR%2Fimage.png?alt=media&#x26;token=7eaad0b1-74f0-48a1-95ea-cc757fc2d832" alt=""><figcaption></figcaption></figure>