Skip to content

Microsoft Setup

What to configure in Microsoft Entra ID and the Fabric admin portal so that MetaMiner can read your tenant. MetaMiner signs in as a service principal you own; tenant settings scoped to a security group unlock the Power BI and Fabric admin APIs, and Graph permissions unlock the Entra directory.

Order of tasks

flowchart LR
  A[Register the application] --> B[Client secret]
  B --> C[Graph API permissions + admin consent]
  C --> D[Security group with the app]
  D --> E[Fabric tenant settings for the group]
  E --> F[MetaMiner Administrator: add environment, Test Connection]
  E -.optional.-> G[Capacity Metrics app + workspace role]
  E -.optional.-> H[Delegated sign-in consent]

Microsoft Entra ID

  • Register the Application

    Create the single-tenant app registration and record its tenant and client IDs.

  • API Permissions

    The Microsoft Graph application permissions MetaMiner checks, and why it needs no Power BI permissions.

  • Client Secret

    Create the secret, store it safely, and rotate it before it expires.

  • Security Group for the App

    A group containing only MetaMiner's service principal, used to scope the tenant settings.

Fabric admin portal

  • Tenant Settings

    The admin API, Fabric API and scan detail settings, and the Test Connection step that proves each one.

  • Workspace Access

    When the service principal needs a workspace role, and which features run as the signed-in user.

  • Capacity Metrics App

    Install the Capacity Metrics app and point MetaMiner at its semantic model.

Optional

Chapter status