Reporting Hub Knowledge Center
  • Reporting Hub Knowledge Center
  • GETTING STARTED
    • Required Azure Services
    • Deployment Step-by-Step
      • Self-Serve Guided Install
      • Enable Power BI Service Settings
      • Configure Reporting Hub App Settings
      • Set Your Home Page
    • Azure Marketplace Install
  • CONCEPTS
    • Reporting Hub Architecture
    • AaaS end-to-end Architecture
    • Security & Trust Center
  • TUTORIALS
    • Azure Portal Administration
    • App Settings
      • Tenant Admin
        • Tenant Switching
      • Managing Your Subscription
      • Authentication Admin
      • Language Admin
      • SMTP Setup
      • Payment Provider Integrations
      • Notifications Admin
    • Embedded Capacity Admin
      • Switching to a Fabric Capacity
    • Connect Power BI Workspaces
    • Customize Theme
      • Branding (Images and Text)
      • Theme and Layout
      • Colors
        • Colors Overview
      • Fonts
    • Managing Content
      • The Manage Navigation Menu
      • Adding a Category
      • Embedding Power BI Content
      • Row Level Security
      • Search Tags
      • Content Page Options
      • Embedding a URL Page
      • Create Embed URL Links
    • Report Options
      • Create Report Bookmarks
      • Schedule Email Reports
      • Favorites
    • Managing Your Gateway
    • User Management
      • Managing User Access
      • Managing Groups
      • Managing Users in Entra ID
    • Secondary Environment (Test/Prod)
    • Embed the Reporting Hub in Your App
    • Usage Analytics
      • App Usage Tracking with Google Analytics
      • App Usage Tracking with SQL DB
    • App Performance
    • Azure Resource Monitoring
    • Self-Serve Guided Updates
  • Reference
    • What's new in the Reporting Hub?
    • Troubleshooting
    • Support Runbooks
      • Critical System Outage (L1)
      • Users Unable to Access (L2)
      • Content Not Available (L2)
      • Application is slow/getting slower (L2)
      • Capacity not starting/stopping automatically
Powered by GitBook
On this page
  • Power BI Embedded Administration
  • Add a Power BI Capacity Administrator
  • Manually Administering your Embedded Capacity
  • Microsoft Entra ID
  • Azure App Service
  • Restarting your Azure App Service
  • Application Logs
  • App Service Monitoring and Alerts
  • Configurable Settings: Application Idle Timeout & Access Audit Log Retention
  • Customize your URL
  1. TUTORIALS

Azure Portal Administration

Understanding key aspects of Azure as it relates to the Reporting Hub

PreviousSecurity & Trust CenterNextApp Settings

Last updated 1 month ago

Now that you've completed deployment, there are some key aspects of the Azure Portal you'll need to know.

To get started, log on to:

Power BI Embedded Administration

Within the Azure Portal, you won't need to do too much to administer the Power BI Embedded Capacity. This will be managed programmatically by the Reporting Hub application. You will need to ensure that people in your organization who need to add Power BI workspaces to the embedded capacity are set as Power BI Capacity Administrators.

Add a Power BI Capacity Administrator

Once signed into the Azure Portal, search for and select Power BI Embedded Capacity:

Manually Administering your Embedded Capacity

You can manually make changes to your capacity status from the Azure Portal.

Activate Your Embedded Capacity

If your Embedded Capacity status is Paused, you can manually activate it by clicking on the 'Start' button as shown below:

Pause Your Embedded Capacity

If your Embedded Capacity is Active, you can manually pause it clicking on the 'Pause' button as shown below:

Restarting Your Embedded Capacity if 'hung up' or 'stuck' in Resuming status

Although a rare occurrence, from time-to-time your Embedded Capacity may get stuck or hung-up in the Resuming status as shown in the image below:

If your capacity maintains the 'Resuming' status for more then a minute or so, it's likely hung up. You can attempt to resolve this by simply giving it time to correct itself, or temporarily removing the load from the capacity and giving it time to correct itself. To accomplish this, you can try the following:

  • Ensure scheduled report refreshes running on the capacity are not active in the Power BI Service.

After removing the load from the capacity, the issue should correct itself after several minutes but may potentially take longer. Following this, it's a good idea to Pause, then Restart your capacity to cycle it. If the problem persists you will need to contact Microsoft Support.

Microsoft Entra ID

Microsoft Entra ID (formerly called Azure Active Directory) is where users and security groups are created and managed. You can add users to your domain or you can invite guest users who also have Office 365 (Entra ID B2B). You can also create security groups that make it easier to manage access in the Reporting Hub.

Users

To add a user, open your Azure Portal. Navigate to Entra ID, select Add, and choose User. You can also get to Users via the Settings on the left of the page. For detailed instructions go to:

Note: Users only need to be added within your Entra ID, they do not require any licenses to access the Reporting Hub.

Security Groups

We recommend using security groups for managing users and assigning permissions within the Reporting Hub. While you can add individual users to each report, it does increase the administrative workload. For every new user, you would need to add them to each report. If you use security groups, once a user is assigned a security group, the user will have access to all reports within the Reporting Hub to which the security group has been assigned.

For Microsoft documentation on how to create security groups and assign users please visit below:

Note: The Reporting Hub only looks for groups of security type. Microsoft 365 groups are ignored. You can also nest security groups and the Reporting Hub will traverse the hierarchy to ensure users are given access to only the reports to which their security has been assigned.

Azure App Service

Your Azure App Service is where the Reporting Hub web application is deployed/hosted within your Azure environment. If you are experiencing issues with performance or application response times, you will need to investigate your App service. If you are experiencing poor response times, we recommend performing a restart of your App Service as shown below:

Restarting your Azure App Service

Application Logs

Important: If you submit a support request and are requesting technical support from the Reporting Hub, the application logs must be enabled.

How to Disable Application Log Access:

  • From within the Azure Portal, access your Azure App Service and navigate to Environment Variables

  • Within the App Settings tab you will see a sharelogswithtrh setting. Change value to "DoNotShare"

App Service Monitoring and Alerts

We recommend setting up monitoring and alerts for your Azure App Service. This will allow you to proactively manage your App Service should any performance issues arise. Please see Microsoft's documentation for more information:

Configurable Settings: Application Idle Timeout & Access Audit Log Retention

Application Idle Timeout

By default, The Reporting Hub application will automatically log users out after 59 minutes of inactivity. This feature enhances session security and optimizes resource management.

Access Audit Log Retention

Access audit logs for The Reporting Hub are retained for 180 days. This policy supports user activity monitoring for compliance while ensuring that your database remains optimized.

How to configure these settings:

  1. Under Developer Tools, click Advanced Tools, then select Go

  2. Once the Kudu console opens, log in and go to Tools > Zip Push Deploy from the top menu

  3. Scroll down and locate the appsettings.json file, then click the edit icon

  4. After the first { character at the top of the file, paste the following code:

"trhappSettings": {
  "accessLogRetentionDays": 180,
  "idleTimeToLogout": 59
},
  1. Change the value of "idleTimeToLogout" to the number of minutes you'd like the session to remain active.

  2. Change the value of "accessLogRetentionDays" to the number of days you'd like to retain the logs for.

  3. Save the file

  4. Navigate to your Reporting Hub application.

  5. From the user menu, go to App Settings > Tenant Admin. Scroll to the bottom and Reset Application Memory.

Customize your URL

When the Reporting Hub application is installed in your Azure subscription, the App Service is assigned a https://<insert unique name>.azurewebsite.net DNS. You can add your own custom DNS in the App Service. This requires someone who has access to your DNS provider and has the permissions in the Azure Portal to add a DNS to the App Service. You'll also want to add an SSL certificate to secure the site (https instead of just http).

For Microsoft documentation on how to add a Custom DNS and and SSL certificate, please visit below:

Note: Customizing the DNS is not included in our standard deployment but is available at an extra charge upon request.

To add an Administrator, the Power BI Embedded Capacity needs to be active. Once active, you'll find Power BI capacity administrators under Settings. Now you can add the users who will be assigning the Embedded capacity to Workspaces . Don't forget to click "Save" before closing this blade and pausing the Embedded capacity.

Good to know: Power BI Embedded Capacity management can be disabled in the Reporting Hub. This is useful if you use your Power BI Embedded capacity for more than just the Reporting Hub. To find out more, go to article.

Let the Reporting Hub go inactive or temporarily disable the from the Power BI settings page.

Your Reporting Hub application creates and stores log files based on activity of the application itself and underlying Azure resources. The Reporting Hub can request and read the locally deployed Reporting Hub instance application log files by default. Application log files are not saved or stored within the license manager application. The application log files are used in the event of support requests to identify and troubleshoot potential issues with your application or supporting Azure resources. Read access to the application log files can be disabled and blocked by the customer if desired.

Go to your App Service for RH in .

in app.powerbi.com
Embedded Capacity Admin
capacity manager
license manager
Azure
portal.azure.com
LogoHow to create or delete users in Microsoft Entra ID - Microsoft EntraMicrosoftLearn
LogoHow to manage groups - Microsoft EntraMicrosoftLearn
LogoMonitor apps - Azure App Servicedocsmsft
LogoTutorial: Create custom Azure DNS records for a web appdocsmsft
Custom DNS instructions from Microsoft
LogoAdd and manage TLS/SSL certificates - Azure App Servicedocsmsft
SSL Certificate instructions from Microsoft