Microsoft Fabric OneLake Connector > Connections for Microsoft Fabric OneLake > Prerequisites
  

Prerequisites

Before you configure the connection properties, make sure to complete the following prerequisites:
  1. 1Configure the following prerequisites in Power BI:
    1. aCreate a workspace.
    2. bCreate a lakehouse in the workspace. Ensure that you have admin privileges to create the lakehouse.
  2. 2Configure the following prerequisites in the Azure portal:
    1. aCreate an application in Azure Active Directory and generate client ID, tenant ID, and client secret.
    2. bCreate a security group in Azure Active Directory and add owners or members to the security group.
  3. 3Enable the Power BI service admin settings to allow the Azure Active Directory application to use the Power BI APIs.
  4. 4Add the Azure Active Directory application to the workspace in Power BI.

Creating a workspace in Power BI

You must access your Power BI account and create a workspace.
    1Log in to your Power BI account.
    2On the home page, click Power BI, and then click Data Engineering.
    The Power BI home page displays the Data Engineering option.
    3Click Workspaces, and then click New workspace to create a new workspace.
    The Workspaces section displays the option to create a new workspace.
    4On the Create a workspace page, enter the details for the new workspace. The Create a workspace window displays fields to create a workspace.
    1. aIn the Name field, enter the workspace name.
    2. bIn the Description field, provide a description for the workspace.
    3. cOptionally, assign the workspace to a domain.
    4. dClick Apply.

Creating a lakehouse in the workspace

You need to create a lakehouse in the workspace that you created in Power BI.
    1Navigate to the workspace you created.
    2Click New, and then click Lakehouse to create a new lakehouse.
    The workspace window displays the option to add a lakehouse in the newly created workspace.
    3Enter a name for the new lakehouse, and then click Create.

Creating an application in Azure Active Directory

In the Azure portal, you need to create an application in Azure Active Directory and generate client ID, tenant ID, and client secret.
    1Log in to the Azure portal.
    2Click Azure Active Directory. The Azure services window displays the Azure Active Directory.
    3In the Manage section, click App registrations. The Manage section under Azure Active Directory displays the option to create a new Azure Active Directory application.
    4Click New registration to create a new Azure Active Directory application.
    5On the Register an application page, enter the details for the new application. The Register an application window displays fields to register an application.
    1. aIn the Name field, enter the application name.
    2. bIn the Redirect URI section, select Web as the type of the application and enter the URL of the application.
    3. cClick Register.
      4. The details of the newly created Azure Active Directory application page are displayed. The Application ID, Object ID, and Directory ID are displayed when you register an application.
    6In the Manage section, click Certificates & secrets.
    7Click New client secret. The Certificates and secrets option in the Manage section allows you to add a client secret.
    8In the Add a client secret page, perform the following steps:
    1. aEnter a name for the client secret in the Description field.
    2. bIn the Expires field, you can select the duration of the key as Never(Recommended).
    3. cClick Add.
    4. dThe value of the key is generated and displayed in the Value field. The Value field displays the value of the key.
      5. Note: You must copy the key value as you cannot retrieve the value once you leave the page. Ensure that the client secret does not contain special characters.
    After you register the application, you can continue without assigning any API permissions to the application. If the application is assigned some default permissions, you can remove them.

Creating a security group in Azure Active Directory

After you create an application, you need to create a security group in Azure Active Directory and add owners or members to the group.
    1Click Azure Active Directory. The Azure services window displays the Azure Active Directory.
    2In the Manage section, click Groups. The Groups page displays the options to create a new group, download groups, and manage views.
    3Click New group to create a new group in Azure Active Directory.
    4On the New Group page, enter the details for the new group. The New Group page diplays various fields to create a new group.
    1. aSelect a Group type.
    2. bIn the Group name field, enter the group name.
    3. cIn the Group description field, add a description to the group.
    4. dSelect a Membership type.
    5. eOptionally, you can add members or users to the group. Click the link under Owners or Members to populate a list of every user or member in your directory. Choose users or members from the list, and then click Select.
    5Click Create.

Enabling the Power BI service admin settings

In the Power BI account, enable the Power BI service admin settings to allow Azure Active Directory application to access the Power BI APIs.
    1Log in to your Power BI account.
    2Navigate to Tenant settings, and then click Developer settings. The Admin portal page displays the Tenant and Developer settings.
    3Enable Embed content in apps for the entire organization or the security group you created in Azure Active Directory, and then click Apply.
    4Enable Allow service principals to use Power BI APIs for the entire organization or the security group you created in Azure Active Directory, and then click Apply.
    The Developer settings pane displays the option to allow service principals to use Power BI APIs for the entire organization or the security group.

Adding the Azure Active Directory application to the workspace

In the Azure portal, add the Azure Active Directory application to the workspace to provide access to your Power BI reports, dashboards, and datasets.
    1 Navigate to the workspace that you created.
    2From the More options menu, select Workspace access.
    The Workspace access option in the More options menu displays the workspaces that you have created.
    3In the Manage access pane, search for the Azure Active Directory application that you want to add to the workspace.
    The Manage access pane allows you to search for the required Azure Active Directory application that you want to add to the workspace.
    4In the search results, select the Azure Active Directory application and click Add people or groups.
    5 Assign an appropriate role to the Azure Active Directory application from the list based on the capabilities you require, with the maximum number of capabilities associated with the admin role and the minimum number of capabilities with the viewer role:
    Note: The capabilities associated with the viewer role is insufficient to successfully run tasks. You would require at a minimum the contributor role to access Microsoft Fabric OneLake and perform read and write operations.