Required Power BI Permissions
For AtlasData to work correctly, some permissions need to be configured in Power BI.
API Permissions
AtlasData uses the following Power BI API permissions:
| Permission | Type | Description |
|---|---|---|
Workspace.Read.All | Delegated | List workspaces |
Report.Read.All | Delegated | Read reports |
Dataset.Read.All | Delegated | Read datasets |
Dashboard.Read.All | Delegated | Read dashboards |
Tenant.Read.All | Delegated | Tenant information |
Configure in Power BI Admin Portal
1. Enable Service Principal
- Go to app.powerbi.com/admin-portal
- Go to Tenant settings
- Find Developer settings
- Enable Allow service principals to use Power BI APIs
- Select Specific security groups (recommended)
- Add the group containing your Service Principal
2. Enable Content Embedding
- In Tenant settings, find Export and sharing settings
- Enable Embed content in apps
- Select the groups that can use embed
3. Configure Workspace Access
For each workspace:
- Open the workspace in Power BI
- Click Access (settings)
- Add the Service Principal as:
- Member: For full access (recommended)
- Viewer: Read only
Access Levels
| Level | Can do |
|---|---|
| Admin | Everything, including managing access |
| Member | Edit and publish content |
| Contributor | Edit existing content |
| Viewer | Only view |
For AtlasData, Member or Viewer is sufficient.
Verify Permissions
To verify that permissions are correct:
- In AtlasData, go to Settings > Connection
- Click Test Connection
- Verify that all expected workspaces appear
Common Errors
"Insufficient permissions"
- Service Principal was not added to the workspace
- Access has not propagated yet (wait 5-10 minutes)
"API not enabled"
- Power BI API is not enabled for Service Principals
- Follow step 1 above to enable
"Workspace not found"
- Workspace may be in another tenant
- Verify you are logged into the correct tenant