Before you create a catalog source, ensure that you have the information required to connect to the source system.
Perform the following tasks:
•Assign the required permissions.
•Configure a connection to the Microsoft Power BI source system in Administrator.
•Enable port 443 and configure your firewall to allow traffic to pass over port 443. The Secure Agent uses port 443 to connect to the internet.
•If you use service principal authentication to authenticate your organization to the Microsoft Power BI service, enable read-only access to the Power BI admin API. For information about configuring service principal for read-only admin APIs, see HOW TO: Configure Service Principal for Microsoft Power BI.
•In the Admin API settings section of the Power BI admin portal, enable the option Enhance admin APIs responses with DAX and mashup expressions.
•Whether you authenticate using the administrator privileges or a service principal, enable Preview features for your organization to extract metadata from a Microsoft Power BI source system. Additionally, enable the enhanced metadata scanning feature to extract lineage from refreshed and republished datasets in your Microsoft Power BI environment.
•If you plan to connect Microsoft Power BI to Microsoft Azure through a REST API with the administrator user role, perform the following tasks:
1Assign one of the following Power BI administrator privileges to the administrator user role:
▪ Microsoft 365 Global Administrator
▪ Power BI Service Administrator
2Obtain administrator access at the workspace level.
•Create endpoint catalog sources for connection assignment.
Verify permissions
To extract metadata and to configure other capabilities that a catalog source might include, you need account access and permissions on the source system. The permissions required might vary depending on the capability.
Permissions for metadata extraction
To extract metadata, you need account access and permissions to the Microsoft Power BI source system.
Verify that the administrator performs the following tasks:
•Grants read permission to the user account to access the source system for Administrator user authentication.
•Enables read-only access to the registered application for service principal authentication.
Permissions to run data classification
You can perform data classification with the permissions required to perform metadata extraction.
Permissions to run glossary association
You can perform glossary association with the permissions required to perform metadata extraction.
Create a connection
Create a Microsoft Power Bl connection object in Administrator with the connection details of the Microsoft Power BI source system.
1In Administrator, select Connections.
2Click New Connection.
3In the Connection Details section, enter the following connection details:
Connection property
Description
Connection Name
Name of the connection.
Each connection name must be unique within the organization. Connection names can contain alphanumeric characters, spaces, and the following special characters: _ . + -,
Maximum length is 255 characters.
Description
Description of the connection. Maximum length is 4000 characters.
4Select the Microsoft Power BI connection type.
5In the Microsoft Power BI Properties section, in the Runtime Environment list, select the runtime environment where you want to run the tasks.
6In the Connection Section area, in the PowerBI Cloud Connection Mode list, enter the connection properties.
The following table describes the connection properties:
Property
Description
PowerBI Cloud Connection Mode
The Connection Mode. Choose to connect using the Admin User option or the Service Principal option.
PowerBI Cloud URL
The URL to access the Microsoft Power BI cloud host.
Enter the URL to access Microsoft Power BI and connect to the REST API, for example https://api.powerbi.com/
7Based on the connection mode you selected, enter the following connection properties:
Admin User option
Specify the following properties:
Property
Description
PowerBI Cloud Client ID
The ID to connect to the Microsoft Power BI cloud host.
Enter the application ID or client ID for your Power Bi app registered in Microsoft Azure Portal.
PowerBI Cloud Username
User name of the administrator to connect to the Microsoft Power BI cloud host.
PowerBI Cloud Password
The password of the administrator account to connect to the Microsoft Power BI cloud host.
Proxy host
Host name of the outgoing proxy server.
Proxy port
Port number of the outgoing proxy server.
Proxy username
Name of the authenticated user of the proxy server. This is required if the proxy server requires authentication.
Proxy password
Password for the authenticated user. This is required if the proxy server requires authentication.
Parameter that the endpoint uses to authenticate the user.
PowerBI Cloud Client ID
The ID to connect to the Microsoft Power BI cloud host.
Enter the application ID or client ID for your Power BI app registered in Microsoft Azure Portal.
PowerBI Cloud Tenant ID
Name of the Azure Active Directory tenant.
PowerBI Cloud Client Secret
The client secret key to complete OAuth Authentication in the Azure Active Directory.
Proxy host
Host name of the outgoing proxy server.
Proxy port
Port number of the outgoing proxy server.
Proxy username
Name of the authenticated user of the proxy server. Required if the proxy server requires authentication.
Proxy password
Password for the authenticated user. Required if the proxy server requires authentication.
8Click Test Connection.
9Click Save.
Create endpoint catalog sources for connection assignment
An endpoint catalog source represents a source system that the catalog source references. Before you perform connection assignment, create endpoint catalog sources and run the catalog source jobs.
You can then perform connection assignment to reference source systems and run connection-aware scans to view complete lineage with source system objects.