aRegister your application in Microsoft Entra ID and generate client ID, tenant ID, and client secret.
The connector does not require any API permissions assigned to your application. Additionally, you can remove any API permissions that are assigned to the application.
bCreate a security group with assigned owners or members in Microsoft Entra ID.
3To allow Microsoft Entra app to use the Power BI APIs, enable the Power BI service admin settings, and then add the Microsoft Entra app to the workspace in Power BI.
Note: The Manage access pane in the Microsoft Entra app allows you to add roles based on the required capabilities. The pane displays admin, member, contributor, and viewer roles. The maximum number of capabilities are associated with the admin role. However, to access Microsoft Fabric OneLake and perform read and write operations, you need at least the Contributor role.
For more information about enabling access in the Power BI admin portal and adding the Microsoft Entra app to the workspace, see Enabling access in the Power BI portal.