> For the complete documentation index, see [llms.txt](https://maqsoftware.gitbook.io/embedfast-technical-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://maqsoftware.gitbook.io/embedfast-technical-documentation/setting-up/pre-deployment/microsoft-entra-security-group.md).
# Microsoft Entra security group
Follow the steps below to create a security group for the Power BI tenant Settings and add a Power BI app registration to the security group.
## Create a security group
1. Type “**Microsoft Entra ID**" in the [Azure portal](https://portal.azure.com) search bar and select said option as it appears.
2. Select **Groups** (under Manage) from the left pane.
3. Click on **New group** to create a new security group.
4. Fill out the **New Group** form as detailed below:
* Group type: "**Security**"
* Group name: Create a name for the group. In our example, we named the group PowerBIAPISG, hence it will be referred to as such in this documentation's images, etc. Feel free to create your own group name.
* Group description: Optional.
* Membership type: Pre-selected, it should be "**Assigned**".
5. Click **Create** to create the security group.
## Add Power BI App registration to the security group
1. Select **All groups** from the left pane of the Azure AD page.
2. Type your security group's name in the search bar and click on it.
{% hint style="info" %}
**Note:** As mentioned in the previous section, we named our group PowerBIAPISG, hence it will be referred to as such in this documentation.
{% endhint %}
3. Select **Members** (under Manage) from the left pane and click on **Add members**.
4. Search for the name of the app registration created for the Power BI Service and select it. Click on the **Select** button to add the app registration to the security group.
.png?alt=media)
