Microsoft Power BI

Connect Parable to the Microsoft Power BI REST API with a Microsoft Entra service principal. This Authorizable release validates credentials and Power BI read-only admin API access. It does not sync Power BI data yet.

Overview
Setup Guide
Permissions
Troubleshooting

Parable requests an application token from your Microsoft Entra tenant, then sends one read-only request for a single Power BI workspace record. The request confirms that the service principal can use Power BI read-only admin APIs.

Data streams

This Provider Plugin defines 0 data streams.

Stream	Description	Sync
-	This Authorizable release does not read Power BI data.	-

Microsoft Entra service principal

What you need

Credential	Source
Tenant ID	Microsoft Entra app registration Overview page
Client ID	Microsoft Entra app registration Overview page
Client secret	Microsoft Entra app registration Certificates & secrets page

You need a Power BI or Fabric administrator who can change tenant settings. You also need permission to create an app registration, client secret, and security group in Microsoft Entra.

Register the application

In Microsoft Entra, create a single-tenant app registration for Parable.
Create a client secret and copy its value when Microsoft shows it.
Do not add delegated or application permissions for Power BI to this app. Microsoft states that service principals calling read-only admin APIs must not have admin-consent-required Power BI permissions.
Create or choose a Microsoft Entra security group and add the service principal to it.

Allow the service principal in Power BI

Open the Power BI or Fabric Admin portal.
Enable the tenant setting that allows service principals to use read-only admin APIs.
Limit the setting to the security group that contains the service principal.

The Power BI tenant setting is separate from the Microsoft Entra app registration. Parable cannot change it.

Save and test

Enter the Tenant ID, Client ID, and client secret in Parable. Save the connection. Parable requests a token from https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token with the Power BI resource scope https://analysis.windows.net/powerbi/api/.default. It then sends GET https://api.powerbi.com/v1.0/myorg/admin/groups?$top=1.A successful probe confirms credential acceptance and read-only admin API access. It does not confirm data-stream coverage because this release has no data streams.

Result	Meaning	Action
Microsoft rejects the token request	Tenant ID, Client ID, or client secret is invalid	Check the app registration and create a new secret if the saved value is unavailable.
`403 Forbidden`	The service principal cannot use read-only admin APIs	Check group membership and the Power BI tenant setting.
`429 Too Many Requests`	Power BI throttled the probe	Wait and test the connection again.

Microsoft limits the admin workspaces API to 50 requests per hour or 15 requests per minute for each tenant. Parable sends one request per credential test and honors a throttling response.

​Data streams

​Microsoft Entra service principal

​What you need

​Register the application

​Allow the service principal in Power BI

​Save and test

​Microsoft Entra service principal

​Microsoft documentation

Data streams

Microsoft Entra service principal

What you need

Register the application

Allow the service principal in Power BI

Save and test

Microsoft Entra service principal

Microsoft documentation