> ## Documentation Index
> Fetch the complete documentation index at: https://docs.parable.work/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Power BI

> Connect Microsoft Power BI with a Microsoft Entra service principal

Connect Parable to the Microsoft Power BI REST API with a Microsoft Entra service principal. This Authorizable release validates credentials and Power BI read-only admin API access. It does not sync Power BI data yet.

**Overview**

Parable requests an application token from your Microsoft Entra tenant, then sends one read-only request for a single Power BI workspace record. The request confirms that the service principal can use Power BI read-only admin APIs.

## Data streams

This Provider Plugin defines 0 data streams.

| Stream | Description | Sync |
| - | - | - |
| - | This Authorizable release does not read Power BI data. | - |

**Setup Guide**

### Microsoft Entra service principal

#### What you need

| Credential | Source |
| - | - |
| Tenant ID | Microsoft Entra app registration Overview page |
| Client ID | Microsoft Entra app registration Overview page |
| Client secret | Microsoft Entra app registration Certificates & secrets page |

You need a Power BI or Fabric administrator who can change tenant settings. You also need permission to create an app registration, client secret, and security group in Microsoft Entra.

#### Register the application

1. In Microsoft Entra, create a single-tenant app registration for Parable.
2. Create a client secret and copy its value when Microsoft shows it.
3. Do not add delegated or application permissions for Power BI to this app. Microsoft states that service principals calling read-only admin APIs must not have admin-consent-required Power BI permissions.
4. Create or choose a Microsoft Entra security group and add the service principal to it.

#### Allow the service principal in Power BI

1. Open the Power BI or Fabric Admin portal.
2. Enable the tenant setting that allows service principals to use read-only admin APIs.
3. Limit the setting to the security group that contains the service principal.

The Power BI tenant setting is separate from the Microsoft Entra app registration. Parable cannot change it.

#### Save and test

Enter the Tenant ID, Client ID, and client secret in Parable. Save the connection. Parable requests a token from `https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token` with the Power BI resource scope `https://analysis.windows.net/powerbi/api/.default`. It then sends `GET https://api.powerbi.com/v1.0/myorg/admin/groups?$top=1`.

A successful probe confirms credential acceptance and read-only admin API access. It does not confirm data-stream coverage because this release has no data streams.

**Permissions**

### Microsoft Entra service principal

The app uses the OAuth 2.0 client credentials grant. Do not grant delegated or application Power BI permissions in Microsoft Entra for the read-only admin API flow. Access is controlled by the Power BI tenant setting and its allowed Microsoft Entra security group.

The probe reads at most one workspace from the Power BI admin workspaces endpoint. It does not modify Power BI content.

This Provider Plugin does not declare any data streams.

**Troubleshooting**

| Result | Meaning | Action |
| - | - | - |
| Microsoft rejects the token request | Tenant ID, Client ID, or client secret is invalid | Check the app registration and create a new secret if the saved value is unavailable. |
| `403 Forbidden` | The service principal cannot use read-only admin APIs | Check group membership and the Power BI tenant setting. |
| `429 Too Many Requests` | Power BI throttled the probe | Wait and test the connection again. |

Microsoft limits the admin workspaces API to 50 requests per hour or 15 requests per minute for each tenant. Parable sends one request per credential test and honors a throttling response.

## Microsoft documentation

* [OAuth 2.0 client credentials flow](https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-client-creds-grant-flow)
* [Enable service principal authentication for read-only admin APIs](https://learn.microsoft.com/en-us/fabric/admin/enable-service-principal-admin-apis)
* [Get workspaces as admin](https://learn.microsoft.com/en-us/rest/api/power-bi/admin/groups-get-groups-as-admin)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.