# PowerBI

## PowerBI App Registration, Permission

Go to Azure AD App registration, add “New registration”

![](https://2457798860-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEdkjXblQVFxdE5uvkTZt%2Fuploads%2FVdEFNsMmAoogxTDQ5ePf%2FUntitled.png?alt=media\&token=6adce965-49aa-424b-9510-5f7184511ad9)

Default selection is fine, add a name

![](https://2457798860-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEdkjXblQVFxdE5uvkTZt%2Fuploads%2FYkNvOwAa3g6Z84XlGKyJ%2FUntitled%201.png?alt=media\&token=7df0b726-a1ee-4638-acc9-9c614a34e6d9)

Write down Application (Client ID)

![](https://2457798860-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEdkjXblQVFxdE5uvkTZt%2Fuploads%2Fw3I4NtLjUUIckqXrz7d5%2FUntitled%202.png?alt=media\&token=917c8d6c-c467-440d-8eb6-a0604824c452)

Add a client secret, change the duration to an appropriate amount. Client secret has to be recreated each time it runs out and must also be changed in Snowboard afterwards

![](https://2457798860-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEdkjXblQVFxdE5uvkTZt%2Fuploads%2FTa1MBbnvsOTG4pu4ls94%2FUntitled%203.png?alt=media\&token=95dc79c3-c2dd-4e0d-b5e8-6d82eed57e24)

Write down Value, this is the Client secret for Snowboard

![](https://2457798860-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEdkjXblQVFxdE5uvkTZt%2Fuploads%2FuoePiAG3cwOMFpgILHLH%2FUntitled%204.png?alt=media\&token=2a727d30-f95b-4ea1-8bcc-12374211c818)

Go to API permissions

![](https://2457798860-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEdkjXblQVFxdE5uvkTZt%2Fuploads%2F9V4aarSFP4I2YV6So0Ql%2FUntitled%205.png?alt=media\&token=972300e4-0e6e-4cdf-a17e-915d705a418a)

```
Add “Application Permissions” → “Tenant.Read.All” 
Add “Application Permissions” → “Report.Read.All” 
Add “Application Permissions” → “Report.ReadWrite.All”
```

![](https://2457798860-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEdkjXblQVFxdE5uvkTZt%2Fuploads%2FIdrWQySDqzAX5OVSPUO7%2FUntitled%206.png?alt=media\&token=771661a1-7910-4902-9484-2eb1402088d7)

Grant admin consent

![](https://2457798860-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEdkjXblQVFxdE5uvkTZt%2Fuploads%2FO4GtHpdHfk3VqeoHE4pX%2FUntitled%207.png?alt=media\&token=11a3b186-44d5-44fa-805f-03a501603055)

Get AzureAD Tenant ID (<https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-how-to-find-tenant>)

![](https://2457798860-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEdkjXblQVFxdE5uvkTZt%2Fuploads%2Ffg8jbx8McSHLrQ3ZqCwn%2FUntitled%208.png?alt=media\&token=0036170b-caef-4a48-820b-c361759828f3)

**Shouldn’t be necessary, but for completeness sake:** Go to [https://login.microsoftonline.com/{tenant-id}/adminconsent?client\_id={client-id](https://login.microsoftonline.com/%7Btenant-id%7D/adminconsent?client_id={client-id)} and grant permissions

![](https://2457798860-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FEdkjXblQVFxdE5uvkTZt%2Fuploads%2F9hl5gpGNu2XPyps23T9g%2FUntitled%209.png?alt=media\&token=403ac416-fb66-41b9-958a-3879ac74e6b3)

Today Admin endpoints needed

`https://api.powerbi.com/v1.0/myorg/admin/groups`

<https://learn.microsoft.com/en-us/rest/api/power-bi/admin/reports-get-reports-in-group-as-admin>