# Desktop App

1. Download the Desktop app, [UI+SDK](https://embedfastsolutionbuilds.blob.core.windows.net/powershellscripts/EmbedFASTUISDK.exe) or [SDK Only](https://embedfastsolutionbuilds.blob.core.windows.net/powershellscripts/EmbedFASTSDKOnly.exe).
2. Open the downloaded EmbedFASTUISDK / EmbedFASTSDKOnly setup file to start the installation process.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-b675c236cccee71ef04d56709f514f152cfa8df2%2Fimg1.png?alt=media)

3. Click **Next** to proceed.
4. Choose the destination folder for installation and click **Next** .

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-0ec3033ae061f843e7880b9f1ccea0f739907b15%2Fimg2.png?alt=media)

5. Ensure 'Create desktop icon' is checked. Click 'Next' to initiate the installation process.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-8e6d6500878c05efa252d05584271a49b8f618a7%2Fimg3.png?alt=media)

6. Once the installation is complete, click **Finish** to exit the setup.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-40dcf391772a2cacb1a002853d24bf1b52663c3d%2Fimg4.png?alt=media)

7. Go to Desktop and search for EmbedFASTUISDK / EmbedFASTSDKOnly shortcut created. Double click on it to open.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-230b33f6752394435690a04e837b4da41c245961%2Fimg5.png?alt=media)

8. It will display a variety of prompts. Provide the information as requested. More details regarding the prompts are provided below.

### **Enter your subscription ID**

Follow the steps below to find your subscription ID:

1. Type “ **Subscriptions** " in the [Azure portal](https://portal.azure.com) search bar and select said option as it appears.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-ba52a0c70c193792f7beecaa9bb6eacf0451beb3%2Fimg6.jpeg?alt=media)

2. Copy the subscription ID as shown below.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-3a3a9388d205ec7ef4650e0ea275cbd757e60d08%2Fimg7.jpeg?alt=media)

3. In the Desktop App , paste/enter the subscription ID from the previous step.

### **Enter your tenant ID**

Navigate to your **Azure Active Directory** --> **Overview** and copy the tenant ID as shown below. Paste/enter the ID into the PowerShell terminal.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-9461e28621c65fe97f820a611e22fce97e1f4cfc%2Fimg8.jpeg?alt=media)

## **Pre-Deployment Section**

In this section, you have the option to create a Power BI Embedded Capacity, a Microsoft Entra security group, an app registration for API authentication, and an app registration for Power BI Service.

The app registrations for API authentication and Power BI Service are necessary to be created as part of the pre-deployment process.

### **Power BI Embedded Capacity**

Ensure you have at least one embedded or premium Power BI capacity to use the EmbedFAST on. If not available, uncheck the capacity checkbox to create a capacity .

### **Enter capacity name-**

Enter the name used to identify this resource and is displayed in the Power BI admin portal and Azure portal. The name must be unique in the selected location. Only lowercase letters and numbers may be used.

### **Enter capacity location-**

The location where the capacity will be deployed.

### **Enter resource group name-**

Choose a resource group. The resource group should be inside the same tenant/subscription that will be used to deploy the EmbedFAST.

### **Enter capcity size-**

This is the Power BI Embedded Capacity size. Select the resource size (A1 to A8) that best suits your needs.

### **Microsoft Entra security group**

Uncheck the checkbox if you want do not have a **Microsoft Entra security group** and wish to create one instead.

### **Enter group name-**

Enter a name for the group.

### **App registration for EmbedFAST API Auth**

To create an app registration, you must have one of the following Microsoft Entra roles:

* Global Administrator
* Cloud Application Administrator

{% hint style="info" %}
**Note:** A Global Administrator is typically the person who signs up for the Microsoft Entra ID tenant. View the guide on [assigning Microsoft Entra roles to users](https://learn.microsoft.com/en-us/azure/active-directory/roles/manage-roles-portal) for more information.
{% endhint %}

### **Enter application name-**

The user-facing display name for this application.

### **App registration for Power BI Service**

### **Enter application name-**

The user-facing display name for this application.

### **Enter security group name-**

Enter the group name you provided earlier when creating the security group, or if you already have a security group, enter its name. The Power BI App registraton will be added as a member to this security group.

After filling in all the fields to create the necessary resources, click the **Validate Resources** button to validate the resource names.

If all resource names are validated successfully, click the **Deploy Selected Resources** button.

### **Log into Azure through the** **Browser** **pop-up window**

Choose an account to log into Azure with.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-f0b20f736e7f56ce1bb94fd3870ac83c7b05a91f%2Fimg9.jpeg?alt=media)

Once the pre-deployment is successfully completed, follow the steps below:

### **Power BI capacity administrator**

To work with Power BI Embedding, you need to add the app registration for the Power BI Service as a Power BI capacity administrator. Follow the instructions below:

1. Type “**Power BI Embedded**" in the Azure search bar and select said option as it appears.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-0f9a7fbbd0a53026390b35b4f6bbf20fd26d585b%2Fimg10.jpeg?alt=media)

2. Select the capacity name as shown below:

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-dda901fcfa0d463cfff8e8bff15e916b330d7650%2Fimg11.jpeg?alt=media)

3. This will open an overview page, as shown below:

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-f523b567b59cb253a53920ec5ad9612d6d4191e6%2Fimg12.jpeg?alt=media)

4. Select **Power BI capacity administrators** (under Settings) from the left pane.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-245a0de6369311b4a81c1e508f64543dbd3d0e92%2Fimg13.jpeg?alt=media)

5. Click on **Add** . An **Add capacity administrators** pane will appear on the right side.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-f76b39129fa768d8964068508720059334308b2a%2Fimg14.jpeg?alt=media)

6. Search for the app registration created for the Power BI Service. Add it and click **Select** to save the changes.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-9ce9e2dc37bcb5050b1d39ebbe03cdd8484495b3%2Fimg15.jpeg?alt=media)

{% hint style="info" %}
**About admin consent**

Example (select the image to view it in a larger size): In the image below, the **Tenant.Read.All** API displays a warning, "**Not granted for ------**". This means that admin consent has not been granted.

<img src="https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FIoRgjkb6rS3e5e6zZsKT%2F13.9.png?alt=media&#x26;token=ccfe38d0-6bac-4f88-875e-56029cd2dbd6" alt="" data-size="original">

To grant admin consent:

1. Navigate to **API permissions** (under **Manage**).
2. Select **Grant admin consent for ------**. This will grant admin consent for all APIs that do not have the admin consent. ![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2F5EFrOfPNL4ea4MN88V6P%2F14.0.png?alt=media\&token=4e8f5669-73de-48b3-9fcd-d3dc6ad81c7a)
3. Once the consent is granted, the previous warning will now say "**Granted for ------**". The warning icon will turn into a green tick. ![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FB6ysjVIZSD9CITD3LgGg%2F14.1.png?alt=media\&token=98eac9a5-658d-437b-bcb5-ecdf8537848a)
{% endhint %}

### **Add Role assignments**

To work with capacities, you need to provide Contributor role to the app registration for the Power BI Service on the resource group for capacity created in the pre-deployment steps.

Follow the steps below to find the capacity resource group name:

1. Type “**Power BI Embedded**" in the Azure search bar and select said option as it appears.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-cd71327ac08be57178d190385565d3e803ed2f6a%2Fimg19.png?alt=media)

2. Select the capacity that you will use in EmbedFAST as shown below :

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-bca000762fd14a6cc9a296bc377859c41937078b%2Fimg20.png?alt=media)

3. Here in the overview page, you can find the capacity resource group name and copy it directly to your clipboard.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-9901a5655c76dc1d199c49f1b509542c76246e3a%2Fimg21.png?alt=media)

4. Navigate to this resource group by following the below steps:

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-f5d66da20db22fb52cdb8e3db6616cc07b4190b5%2Fimg22.png?alt=media)

5. Navigate to the Access control (IAM) section

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-60357868deef76df3b4b08f1668b69fe04a76d2b%2Fimg23.png?alt=media)

6. Click on Add button and select add role assignment

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-f8b7fbca7a5f729ac4c205c2e822adede4de43ab%2Fimg24.png?alt=media)

7. Go to Priviledged administrator roles and select Contributor role and click on Next

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-3ccdf366f09c36a90bef5b7c360900d3d20d7281%2Fimg25.png?alt=media)

8. Click on Select members

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-5eae4242f68decef4dc128317f1a442e948495c5%2Fimg26.png?alt=media)

9. Search for your Power BI App registration and select it

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-68704a5f60cd34a46dfbc84afe0b3ccc918281c4%2Fimg27.png?alt=media)

10. Click on Review + assign and this will add the contributor role for Power BI App registration on the selected resource group.

## **Provide the Contributor role to Power BI App registration on the Managed resource group**

This is the name of the managed resource group in your subscription where EmbedFAST’s resources are deployed. The managed resource group is created under the resource group that was created in the prerequisites section. Follow the steps below to find the name of your managed resource group:

1. Type “**Resource groups**" in the search bar and select said option as it appears.
2. Find and select the managed application as shown in the image below:

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-4f60c30f61290970bae91f7056889998d9cfdb4c%2Fimg28.png?alt=media)

3. Copy the name of the managed resource group.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-3debbad46ce94c45ef9e22e99c576e75a3825cb5%2Fimg29.png?alt=media)

4. Navigate to this resource group and go to Access control (IAM) section.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-8f8d58476a121d52fe89626f1d715b087d9bf053%2Fimg30.png?alt=media)

5. Go to Priviledged administrator roles and select Contributor role and click on Next.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-5a358cb7df31c0a567fe43f01e33e03991790056%2Fimg54.png?alt=media)

6. Click on Select members.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-d139ca845021ca2be08d2021a472734740642ce8%2Fimg55.png?alt=media)

7. Search for your Power BI App registration and select it.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-f5e2e49a11f87875d201d17f3b061f58184c9118%2Fimg56.png?alt=media)

8. Click on Review + assign and this will add the contributor role for Power BI App registration on the selected resource group.

## **Post-Deployment section**

### **Enter managed resource group name**

This is the name of the managed resource group in your subscription where EmbedFAST’s resources will be deployed to. The managed resource group is created under the resource group that was created in the prerequisites section. Follow the steps below to find the name of your managed resource group:

1. Type “ **Resource groups** " in the [Azure portal](https://portal.azure.com) search bar and select said option as it appears.
2. Find and select the managed application as shown in the image below:

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-85a0bc117ea29c2adb70529c64b0559516fac8c3%2Fimg31.jpeg?alt=media)

3. Copy the name of the managed resource group.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-3b5d97def04c708cc1fbfbf045b4af5c9f0fb53b%2Fimg32.jpeg?alt=media)

4. Paste/enter the managed resource group name in the Desktop App .

### **Enter your application name**

5. Provide the name of your app

### **Enter capacity resource group name**

1. Type “**Power BI Embedded**" in the [Azure portal](https://portal.azure.com) search bar and select said option as it appears.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-0025dbb79f6e089643304e0b6312a61cb38848a3%2Fimg33.png?alt=media)

2. Once on the page, you will see a list of **Power BI Embedded Capacity** displayed. Select the embedded capacity that you have created earlier in the section.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-ab0872f55b4e32a3ad4b6a77a96df5915324bbf2%2Fimg34.png?alt=media)

3. Copy the capacity resource group name as shown below.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-bf294ffb0197e3b20e61d2ee9e5a8c0acca0e2e7%2Fimg35.png?alt=media)

4. In the EmbedFAST application, paste/enter the capacity resource group name from the previous step.

### **Enter API Auth App Registration Name**

This app registration name is obtained from the overview page of the app registration previously created for the EmbedFAST API as part of the pre-deployment steps. Follow the steps below:

1. Type "**App registrations**" in the [Azure portal](https://portal.azure.com) search bar and select said option as it appears.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-41a62cb75772d6ceaad75d758b8046adcd9394fe%2Fimg36.jpeg?alt=media)

2. Click on **Owned applications** to see a list of applications you registered, including the ones for the API and Power BI Service done in the pre-deployment steps.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-2836629f848f89283f6b6ac2642757c8acce92ac%2Fimg40.jpeg?alt=media)

3. In the overview page, you can directly copy the application name to clipboard as shown below:

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-bc766aafdd7425a738f268d91ad5211e7028cd31%2Fimg38.png?alt=media)

### **Enter** **Power BI app** **registration** **name**

On the owned applications page, select the app registration you created for power bi service . You can find the name of the service principal in the top-left corner of the page.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-efcdafdd05816724d4d21f6651897a20f843deca%2Fimg39.jpeg?alt=media)

### **Enter your service principal client secret**

Follow the steps below to create a client secret:

{% hint style="danger" %}
**Note: The client secret will only be visible at the time of creation.** Take note of it and store it securely for future use for whenever the client secret is required.
{% endhint %}

1. Type "**App registrations**" in the [Azure portal](https://portal.azure.com) search bar and select said option as it appears.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fwg1006HCGzQ4sdHaZPUt%2Fimage.png?alt=media\&token=484e1d8b-117c-4963-adb2-0145724bdc2f)

2. Click on **Owned applications** to see a list of applications you registered. Search for the application created for the Power BI Service on this page.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-2836629f848f89283f6b6ac2642757c8acce92ac%2Fimg40.jpeg?alt=media)

3. Click on the application's name to access its details page.
4. Select **Certificates & secrets** (under Manage) from the left pane.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FJ4Wv62WvCKKsn9ZJygoh%2F8.3.png?alt=media\&token=3c97945b-dbcd-485d-bb0e-13a14e1bfbc0)

5. Click on **New client secret** to create a client secret.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FnnEOidQDe8iTEPEeQEGu%2F8.4.png?alt=media\&token=3e7c7de4-7b23-48b0-84a6-d295b290738c)

6. Enter a description and select when the secret expires. Click on **Add** to add the client secret.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FNnCc7Kizlto350hYo0mX%2F8.5.png?alt=media\&token=d5f42adc-81c2-4c9b-a7ef-d92589ff6853)

7. Copy the value of the newly created client secret as shown below.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FTot8kyoAYafsxR3stolL%2F8.6.png?alt=media\&token=b8d68456-92a1-45c4-bcd3-01e97bda4410)

{% hint style="danger" %}
**Reminder:** Take note of the client secret and store it securely for future use for whenever it is required. The client secret is only visible at the time of creation and will **NOT** be visible again.
{% endhint %}

**Enter the sender email**

Provide an email address. This email will be used for sending subscription emails to other users.

**Enter the sender email password**

Provide the password for the email address provided in the previous step.

Click the **Start Post-Deployment Operation** button. This will initiate a post-deployment process that performs the operations outlined below:

* Add your client IPv4 address to Set Server Firewall.
* Grant the necessary permissions to the service principal app registration on the Database. It will give admin access on the Database created.
* Add the Power BI App service principal as an external Azure AD user.
* Grant permissions to the user.

{% hint style="info" %}
**Note:** If an error occurs (e.g., “Client with IP address ‘IP-Address’ is not allowed to access the server”), you have the option to manually include the IP in the server's firewall rules. Follow the steps detailed below to do so:

1. Type “**Resource groups**" in the [Azure portal](https://portal.azure.com) search bar and select said option as it appears.
2.  Find and select the managed application as shown in the image below:

    <figure><img src="https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fq2K4ZhrvLorahtqmyOOc%2F14.3.png?alt=media&#x26;token=8cd05dc0-1458-4b3d-aca6-f19bd5da607a" alt=""><figcaption></figcaption></figure>
3.  Click on the **Managed resource group** value on right side of the page, it will take you to the managed resource group where all the resources are deployed. /

    <figure><img src="https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FCbC7vdV3UxsYzqysnq83%2F14.4.png?alt=media&#x26;token=84d0f804-e69c-41d0-8a53-d73bfcbcec84" alt=""><figcaption></figcaption></figure>
4.  Select the SQL server deployed with the application's name.

    <figure><img src="https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FTDjtJYSz4jxSQgKDwy1s%2F13.4.png?alt=media&#x26;token=334abd7b-0fdf-4256-9b04-4ae32c7d0e50" alt=""><figcaption></figcaption></figure>
5. Select **Networking** (under Security) from the left pane.
6.  Click on **Add a firewall rule**.

    <figure><img src="https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FBbJZGAVhTkLKHx7yLIGn%2F13.4.png?alt=media&#x26;token=32de4cf3-1ec9-4e91-8767-9124940e4fd9" alt=""><figcaption></figcaption></figure>
7.  Enter the IP address that was not allowed to access the server in the **Start IP** and **End IP** fields. Select **OK** to save the changes.

    <figure><img src="https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FwtcVXxZeImrEYqHBCUWo%2F13.5.png?alt=media&#x26;token=4fd5edd2-cd93-44b6-a172-ff719e7412f0" alt=""><figcaption></figcaption></figure>
{% endhint %}

This completes the deployment process.

## **Re-Deployment section**

## **Enter your subscription ID**

Follow the steps below to find your subscription ID:

1. Type "**Subscriptions**" in the search bar and select said option as it appears.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-ba52a0c70c193792f7beecaa9bb6eacf0451beb3%2Fimg6.jpeg?alt=media)

2. Copy the subscription ID as shown below.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-3a3a9388d205ec7ef4650e0ea275cbd757e60d08%2Fimg7.jpeg?alt=media)

3. In the Desktop App , paste/enter the subscription ID from the previous step.

## **Enter your tenant ID**

Navigate to your **Azure Active Directory** --> **Overview** and copy the tenant ID as shown below. Paste/enter the ID into the PowerShell terminal.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-9461e28621c65fe97f820a611e22fce97e1f4cfc%2Fimg8.jpeg?alt=media)

## **Enter managed resource group name**

This is the name of the managed resource group in your subscription where EmbedFAST’s resources are deployed. The managed resource group is created under the resource group that was created in the prerequisites section. Follow the steps below to find the name of your managed resource group:

1. Type "**Resource groups**" in the [Azure portal](https://portal.azure.com) search bar and select said option as it appears.
2. Find and select the managed application as shown in the image below:

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-85a0bc117ea29c2adb70529c64b0559516fac8c3%2Fimg31.jpeg?alt=media)

3. Copy the name of the managed resource group.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-3b5d97def04c708cc1fbfbf045b4af5c9f0fb53b%2Fimg32.jpeg?alt=media)

4. Paste/enter the managed resource group name in the Desktop App like the previous steps.

## **Enter Location-**

1. Enter the location where you want the DAX resources to get deployed, if not already present.

## **Enter App name-**

Provide the same name that you used as the base name to create resources at the time of marketplace deployment.

## **Enter Service principal client secret-**

1. Type "**App registrations**" in the [Azure portal](https://portal.azure.com) search bar and select said option as it appears.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fwg1006HCGzQ4sdHaZPUt%2Fimage.png?alt=media\&token=484e1d8b-117c-4963-adb2-0145724bdc2f)

2. Click on **Owned applications** to see a list of applications you registered. Search for the application created for the Power BI Service on this page.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-a407d5b7e20cef2c10ec9efdd510587b4830bd35%2Fimg37.jpeg?alt=media)

3. Click on the application's name to access its details page.
4. Select **Certificates & secrets** (under Manage) from the left pane.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FJ4Wv62WvCKKsn9ZJygoh%2F8.3.png?alt=media\&token=3c97945b-dbcd-485d-bb0e-13a14e1bfbc0)

5. Copy the value of the client secret as shown below.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FTot8kyoAYafsxR3stolL%2F8.6.png?alt=media\&token=b8d68456-92a1-45c4-bcd3-01e97bda4410)

## **Enter API Auth App Registration Name**

This app registration name is obtained from the overview page of the app registration previously created for the EmbedFAST API as part of the pre-deployment steps. Follow the steps below:

1. Type "**App registrations**" in the [Azure portal](https://portal.azure.com) search bar and select said option as it appears.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fwg1006HCGzQ4sdHaZPUt%2Fimage.png?alt=media\&token=484e1d8b-117c-4963-adb2-0145724bdc2f)

2. Click on **Owned applications** to see a list of applications you registered, including the ones for the API and Power BI Service done in the pre-deployment steps.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-a407d5b7e20cef2c10ec9efdd510587b4830bd35%2Fimg37.jpeg?alt=media)

3. In the overview page, you can directly copy the application name to clipboard as shown below:

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-bc766aafdd7425a738f268d91ad5211e7028cd31%2Fimg38.png?alt=media)

## **Enter Power BI app registration name**

On the owned applications page, select the app registration you created for power bi service , you can find the name of your service principal at the top left corner of your page.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-efcdafdd05816724d4d21f6651897a20f843deca%2Fimg39.jpeg?alt=media)

## **Enter Previous EmbedFAST Version**

Select the previously deployed version of EmbedFAST.

Click on the Redeploy button to start the redeploy process. This will redeploy the app and also update the database

## **Log into Azure through the** **Browser** **pop-up window**

Choose an account to log into Azure with.

![](https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fgit-blob-f0b20f736e7f56ce1bb94fd3870ac83c7b05a91f%2Fimg9.jpeg?alt=media)

Click the **Redeploy** button. This will initiate a re-deployment process that performs the operations outlined below:

* Update the solution builds
* Update the database
