Enable Power BI Service Settings

Give the Reporting Hub permission to access Power BI

For Reporting Hub (an Entra ID app) to access Power BI content and APIs, a Fabric or Power BI Admin needs to enable the following settings:

• Enable XMLA endpoint

• Embed content in apps

• Allow Service principals can create workspaces, connections, and deployment pipelines

• Allow Service principals can call Fabric public APIs

• Allow service principals to create and use profiles

• Enable Enhance admin APIs responses with detailed metadata

• Grant Permission to workspaces

Enable Power BI Tenant Admin Settings

1. Integration Settings

1.A. Enable XMLA endpoint

Go to Tenant settings in the Power BI Admin portal, and scroll down to Integration settings.

Enable the Allow XMLA endpoints and Analyze in Excel with on-premises datasets toggle either for the entire organization or for the specific security group you created in Azure Entra ID.

https://learn.microsoft.com/en-us/power-bi/enterprise/service-premium-connect-tools#security

Note: If you choose 'specific security group', you must add the Reporting Hub Service Principal security group you created in step 7 of the installation process.

2. Developer Settings

2.A. Embed Content in Apps

Enable the Embed content in apps toggle either for the entire organization or for a specific security group you created in Azure Entra ID.

Note: If you choose 'specific security group', you must add the Reporting Hub Service Principal security group you created in step 7 of the installation process.

2.B. Service principals can create workspaces, connections, and deployment pipelines

Enable the Service principals can create workspaces, connections, and deployment pipelines toggle either for the entire organization or for the specific security group you created in Azure Entra ID.

Note: If you choose 'specific security group', you must add the Reporting Hub Service Principal security group you created in step 7 of the installation process.

2.C. Allow Service principals can call Fabric public APIs

Enable the Service principals can call Fabric public APIs toggle either for the entire organization or for the specific security group you created in Azure Entra ID.

Note: If you choose 'specific security group', you must add the Reporting Hub Service Principal security group you created in step 7 of the installation process.

2.D. Allow service principals to create and use profiles

Enable the Allow service principals to create and use profiles toggle either for the entire organization or for the specific security group you created in Azure Entra ID.

Note: If you choose 'specific security group', you must add the Reporting Hub Service Principal security group you created in step 7 of the installation process.

3. Admin API Settings

3.A. Enable Enhance admin APIs responses with detailed metadata

Enable the Enhance admin APIs responses with detailed metadata toggle either for the entire organization or for the specific security group you created in Azure Entra ID. To learn more about the Admin API Settings, visit the Microsoft link below the screenshot.

Note: If you choose 'specific security group', you must add the Reporting Hub Service Principal security group you created in step 7 of the installation process.

Admin API admin settings - Microsoft FabricMicrosoftLearn

Power BI Workspace Configuration

There are three steps you need to perform in order to make your Power BI workspaces available in Reporting Hub.

• Assign your workspace to your embedded capacity

• Add the Reporting Hub application to your workspace

• Add the workspace to your Reporting Hub Global Tenant

Please note: your personal 'My Workspace' can not be added to the Reporting Hub.

1. Assign your workspace to your Embedded or Fabric Capacity

To add a Power BI workspace to a capacity, you'll need to:

1. Log in to: https://app.powerbi.com

2. Navigate to the workspace you integrate with Reporting Hub. If this is your first time using Reporting Hub, it is recommended to integrate a non-production workspace.

3. Click on the three-dot menu, and choose Workspace Settings.

   
4. On the License Info tab, the license mode to Embedded or Fabric. If you have more than one embedded capacity, select the one that is being managed by Reporting Hub and click Apply.

If capacity is greyed out: The capacity selection will only be visible to you if you are a Capacity administrator and the capacity is currently active. If the capacity is paused, you can start it by either going to the Azure portal and starting the capacity or by signing into Reporting Hub, and the application will start the capacity automatically.

Note that it will say License Info instead of Premium

2. Add the Reporting Hub Application to your Workspace

After assigning the capacity as the workspace license, you need to give your Reporting Hub application access to the workspace.

1. In your Reporting Hub application, navigate to App Settings > App Information.

2. Copy the Name of your service principal and note the Client ID.

1. Navigate back to the workspace in the Power BI Service. Ensure this is the same one from first step.

2. Click on the three-dot menu, and choose Manage Access > + Add people or groups.

Note: A diamond icon next to a Workspace means that the license mode is a capacity.

1. In the 'Enter name or email' field, paste the Name that you copied from your application and select the one that shows an AppID under the name. If you see multiple apps with the same name, select the one with the AppID that matches the Client ID in your app.

You must set the permission to Admin. Click Add.

By using the application, workspaces are typically available in the Reporting Hub within minutes. If you choose the security group instead of the application, workspaces will take longer (hours or even next day) to become available in the Reporting Hub application.

Service principal not showing up? Ensure you have enabled your Power BI Tenant settings and that your Service principals can call Fabric public APIs setting is either enabled for the entire organization or that the application service principal you want to add is a member of one of the specified groups.

Sometimes copying and pasting adds an invisible character and the name may not appear. Try to type the name in and you should see it in the list.

3. Add the Workspace to your Reporting Hub Global Tenant

Now that your workspace is added to your capacity and you have granted your Reporting Hub application permission, you will need to assign the workspace to your Reporting Hub Global Tenant.

We will go through this in the next step, in Configure Reporting Hub App Settings.