Register the Application¶
Register an application in Microsoft Entra ID (formerly Azure AD) so that the MetaMiner Server can sign in to your tenant as a service principal.
Before you begin¶
- An Entra account that can register applications, for example the Application Administrator or Cloud Application Administrator role.
- A name for the application that your administrators will recognize, for example
MetaMiner Power BI. - Use a dedicated application for MetaMiner. Do not reuse an application that other tools sign in with.
Steps¶
-
Sign in to the Microsoft Entra admin center and go to Entra ID > App registrations.
TODO: re-check the Entra admin center navigation path against current Microsoft Learn
Microsoft changes portal labels. Source to check: Microsoft Learn, "Register an application in Microsoft Entra ID". The Azure portal path Microsoft Entra ID > App registrations also works.
-
Click New registration.
- Enter the name, for example
MetaMiner Power BI. - Under Supported account types, select the single-tenant option (accounts in this organizational directory only).
- Leave Redirect URI empty. MetaMiner signs in with the client credentials flow and needs no redirect.
- Click Register. The application's Overview page opens. Registering the application in the portal also creates its service principal (shown under Enterprise applications).
- On the Overview page, copy the Directory (tenant) ID and the Application (client) ID.
Image of the Entra app registration Overview page with the Application (client) ID and Directory (tenant) ID highlighted
../images/microsoft-setup/entra-app-overview.png
Where the values go¶
| Entra value | MetaMiner Administrator field (Power BI environment) |
|---|---|
| Directory (tenant) ID | Tenant ID |
| Application (client) ID | Client ID |
| Client secret Value (next page) | Client Secret |
The MetaMiner Administrator accepts one Power BI environment per tenant ID.
Verify¶
- The application appears under App registrations and its service principal under Enterprise applications.
- You have both IDs recorded.
Troubleshooting¶
Test Connection fails at PBI API Token creation
The tenant ID, client ID or client secret is wrong, or the service principal is disabled. Copy the IDs again from the Overview page and check that the enterprise application is enabled for sign-in. See Validation Errors.
You registered the application in the wrong tenant
The server signs in against the tenant ID you enter, and the tenant settings and permissions apply only in that tenant. Register the application in the tenant that owns your Power BI content.