---
description: >-
  Follow the steps below to create a security group for the Power BI tenant
  Settings, add a Power BI app registration to the security group, and update
  the tenant settings.
---

# Set up and configure the Power BI tenant settings

To create an app registration, you must have one of the following Microsoft Entra roles:

* Global Administrator
* Cloud Application Administrator

{% hint style="info" %}
**Note:** A Global Administrator is typically the person who signs up for the Microsoft Entra ID tenant. View the guide on [assigning Microsoft Entra roles to users](https://learn.microsoft.com/en-us/azure/active-directory/roles/manage-roles-portal) for more information.
{% endhint %}

## Create a security group

{% hint style="info" %}
**Note:** You can skip this step if you already have a security group.
{% endhint %}

1.  Type "**Microsoft Entra ID**" in the [Azure portal](https://portal.azure.com) search bar and select said option as it appears.\\

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2Fao2UDdO15AYZNeCtPr05%2F16.2.png?alt=media&#x26;token=971b27a8-4148-436f-8035-68fc5e43e61b" alt=""><figcaption></figcaption></figure>
2.  Select **Groups** (under Manage) from the left pane.\\

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FIdvWYDciUCyErHoUiHLX%2F16.5.png?alt=media&#x26;token=dda6bc5f-bc70-47cc-b088-1bab1a43f085" alt=""><figcaption></figcaption></figure>
3.  Click on **New group** to create a new security group.\\

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FPSLXS9WVIvt4jwDkxYJ3%2F16.6.png?alt=media&#x26;token=b7edf703-2a09-4f3d-93a0-1c9893f4068a" alt=""><figcaption></figcaption></figure>
4.  Fill out the New Group form as detailed below: \\

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FyhX20qTXC5jVxLVPBPKt%2F6.3.png?alt=media&#x26;token=78f04850-6be4-44a4-bf57-7275aae64f6f" alt=""><figcaption></figcaption></figure>

    * Group type: "**Security**"
    * Group name: Create a name for the group. In our example, we named the group PowerBIPLA, hence it will be referred to as such in this documentation's images, etc. Feel free to create your own group name.
    * Group description: Optional.
    * Membership type: Pre-selected, it should be "**Assigned**".
5. Click **Create** to create the security group.\\

## Add the LoadFAST API App registration to the security group

1. Select **All groups** from the left pane of the Microsoft Entra ID page.
2. Type your security group's name in the search bar and click on it.

{% hint style="info" %}
**Note:** As mentioned in the previous section, we named our group PowerBIAPISG, hence it will be referred to as such in this documentation.
{% endhint %}

<figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FldFEb3OjoYXoo0lfZjdk%2F16.7.png?alt=media&#x26;token=954fee48-dc3f-432e-9b0f-a72e0d973102" alt=""><figcaption></figcaption></figure>

3.  Select **Members** (under Manage) from the left pane and click on **Add members**.

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FHwwOauvvc4aKh74lOjkn%2F6.5.png?alt=media&#x26;token=22612be9-811e-41cb-bc18-c0b4021a74cf" alt=""><figcaption></figcaption></figure>
4.  Search for the name of the app registration created for the LoadFAST API also select the users to be running the PowerShell script for the tool and select it. Click on the **Select** button to add the app registration with Users to the security group.

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FXDuADChzgZGsK6KF7WZF%2F6.6%20(2).png?alt=media&#x26;token=6f4cdd9e-a6d7-417b-a6d3-48c4954eaa54" alt=""><figcaption></figcaption></figure>

## Grant the app registration access on the Power BI workspace

Granting the app registration (also known as the service principal) member-level access to a Power BI workspace is required to calculate the PLT for that workspace's reports.

{% hint style="info" %}
**Note:** Repeat the following steps for **each** workspace where the LoadFAST will be used to calculate the PLT of that workspace's reports.
{% endhint %}

1. Go to the [Power BI web application/Power BI Service](https://app.powerbi.com/).
2.  Go to the workspace that you want to grant the tool access to.

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FokgmWKQgopFReThyox31%2F9.5.png?alt=media&#x26;token=bbea4071-0c70-41b7-93f6-e79a97eca28f" alt=""><figcaption></figcaption></figure>
3.  Click on **Manage access** once on the workspace.

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2F6MAwqjhPRR3mVMt3Vsvy%2F9.1.png?alt=media&#x26;token=2a5961bf-ec27-48f5-b6ea-09c833989c33" alt=""><figcaption></figcaption></figure>
4.  Select **Add people or groups**.

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FCUlsccuhCW1vVems4CSj%2F9.6.png?alt=media&#x26;token=a68a0b30-3f88-4583-8a16-53c365a6bbb7" alt=""><figcaption></figcaption></figure>
5.  Enter the name of the service principal (name of the app registration) which was created [previously](https://maqsoftware.gitbook.io/pbi-load-analyzer-technical-documentation/setting-up/pre-deployment/create-an-app-registration-for-the-loadfast-api#create-an-app-registration).

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FM9vXbDjuq1cq5n2fzGzC%2F9.2.png?alt=media&#x26;token=56075ea9-dd1e-4ef5-ba22-be3798bb7840" alt=""><figcaption></figcaption></figure>
6.  Select the Member role as **Member**.

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FslVqE76MrL72XM5RmDgy%2F9.3.png?alt=media&#x26;token=f955671e-1c64-40d6-9daf-228a5ae62d53" alt=""><figcaption></figcaption></figure>
7.  Click **Add** to assign the role.

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FmJyNYXYSuYI7IsCr0KWP%2F9.4.png?alt=media&#x26;token=53a09ea8-10f6-40d3-9ccb-569ebbf0236e" alt=""><figcaption></figcaption></figure>
8. Repeat the above steps for all the workspace that you want to add or provide access to the service principal to calculate the Page Load Time for that workspace reports.

## Configure the tenant settings

1. Go to the [Power BI web application/Power BI Service](https://app.powerbi.com/).
2.  Click on the settings icon on the top right-hand corner and sign into the **Admin portal** using your Power BI administrator credentials (only an administrator account can access these settings).

    \{% hint style="info" %\} **Note**: The Power BI service must be in the same tenant where you will deploy the LoadFAST tool. \{% endhint %\}

<figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FDtwvq0LesEUyn9HTbWwZ%2F10.1.png?alt=media&#x26;token=d7228dc4-9888-473a-8ebe-4e3536ce1a37" alt=""><figcaption></figcaption></figure>

3. Once you're on the **Tenant settings** page, modify the settings detailed below:

<figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2F7jbXWEsUtmme2w3m9s0c%2F10.2.png?alt=media&#x26;token=ce63791c-6529-49c0-8962-76a684b037ab" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
**Note:** Ensure that the LoadFAST API app registration was added to the security group as detailed in [this step](https://maqsoftware.gitbook.io/pbi-load-analyzer-technical-documentation/setting-up/pre-deployment/set-up-and-configure-the-power-bi-tenant-settings#add-the-loadfast-api-app-registration-to-the-security-group). This is needed to make sure the required access can be granted and the tool can work properly.
{% endhint %}

**Developer settings**

Scroll down within the Tenant settings page to find the **Developer settings**. These settings are required for the app registration created to use Power BI related APIs. Configure the setting as detailed below:

*   Expand the **Embed content in apps**. Enable the setting using the toggle.

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2Fgit-blob-570d26777b702e48bbe195425a1f2bfdf7dd0969%2Fembed_content_powerbi_admin_setting.png?alt=media" alt=""><figcaption></figcaption></figure>

    Under the **Apply to** section, Either enable the **Enable for entire organization** option or add the previously created/your selected security group into the **Specific security groups**.Click **Apply** to save the changes.\

*   Expand the **Service principals can use Fabric APIs** setting. Enable the setting using the toggle.

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FnB6O4gzbNErbqzuLIs34%2FService%20principals%20can%20use%20Fabric%20APIs.png?alt=media&#x26;token=8ad3023b-0d82-46d0-b5c7-b9e34ea384f7" alt=""><figcaption></figcaption></figure>

    Under the **Apply to** section, add the previously created/your selected security group into the **Specific security groups** section. Click **Apply** to save the changes.

## **Assign capacity to your Power BI workspace**

{% hint style="info" %}
**Note:** Skip this step you are using a Premium workspace.
{% endhint %}

1. Go to the [Power BI web application/Power BI Service](https://app.powerbi.com/).
2.  Select **Workspaces** from the left-hand menu.

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FQ9PRNddIkTMBLOkWMzrI%2F9.5%20(2).png?alt=media&#x26;token=a433b61a-6309-4881-ba37-6e42dab39f1a" alt=""><figcaption></figcaption></figure>
3.  Find the workspace you're using for embedding your content. Click on **...** next to the workspace's name and select **Workspace settings**.

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FgUvG63s5Bps61Ylxdkzr%2F11.2.png?alt=media&#x26;token=d6486e7d-ba92-4cf8-a874-fb7716aaa965" alt=""><figcaption></figcaption></figure>
4. Select the **Premium** tab and do the following:
   *   Under **License mode**, select the type of capacity you created [previously](https://maqsoftware.gitbook.io/pbi-load-analyzer-technical-documentation/setting-up/prerequisites/set-up-power-bi-and-azure#power-bi-capacity): Premium capacity or Embedded.

       <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FwgVacMevvgCWiEjA6QFA%2F11.3.png?alt=media&#x26;token=eb6f1031-4615-4ffc-9fd2-55f7b041ac59" alt=""><figcaption></figcaption></figure>
   *   Select the capacity previously created and select **Apply** to save the changes.

       <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FpeeXaDWobn8cOXh6q2cT%2F11.5.png?alt=media&#x26;token=cf3d7b91-28b3-4d74-9a07-889e4f664b58" alt=""><figcaption></figcaption></figure>
5.  After you assign your workspace to a capacity, a diamond appears next to it in the Workspaces list.

    <figure><img src="https://2147433183-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3Am7TO0x29a6l1P0wMUg%2Fuploads%2FQlT808Y34BqW2LNEQ1IM%2F11.4.png?alt=media&#x26;token=c556ca54-8dcb-42e9-b8a8-2edf5edec5d1" alt=""><figcaption></figcaption></figure>
