# Setup and administration for Power BI
You can use OpenID Connect and your existing identity provider (IdP) framework to manage access to CDF data securely. We currently support Azure AD, Microsoft's cloud-based identity and access management service.
This article explains how an Azure Active Directory (AD) administrator can register and consent for an organization to use the Microsoft Power Query for Excel application and allow the Cognite Power BI Connector to impersonate and act on behalf of a user to retrieve data from a CDF project.
When you have registered the Microsoft Power Query for Excel application, users can sign in with their organizational ID and use the Cognite Power BI Connector to retrieve data from a CDF project.
The Cognite Power BI Connector and Excel both use the Microsoft Power Query for Excel enterprise application to retrieve data from CDF. If your organization is using both the Cognite Power BI Connector app and Excel to retrieve data from CDF, you only need to register Microsoft Power Query for Excel for one of them.
# Register the Microsoft Power Query for Excel application
Follow the steps below to register the Microsoft Power Query for Excel application and allow the Cognite Power BI Connector to use it to impersonate and act on behalf of a user to retrieve data from a CDF project:
First, make sure that you have:
- Registered the Cognite API and the CDF portal application in Azure AD.
- Set up Azure AD and CDF groups to control access to CDF data.
- Installed the March 2020 version (or later) of Power BI Desktop. To automatically stay updated with the latest version, download Power BI Desktop from the Microsoft Store (opens new window).
Open Power BI Desktop.
On the Home tab in the ribbon, select Get Data and then More. Then, in the Get Data dialog box, select Other and the Cognite Data Fusion connector.
Enter the CDF project that you want to connect to, for example, publicdata.
Optional: If the CDF project is on a custom cluster, set the CDF Environment to the URL of the API server for the cluster. If you're not sure, leave the field blank.
Sign in as an Azure AD guest user
If you need to sign in to Azure AD as a guest user, specify your Azure AD tenant:
In the Authentication dialog, select Organizational account, and then Sign in.
Sign in with an Azure AD admin account, then review and consent to the permission request on behalf of your organization, and select Accept.
The Microsoft Power Query for Excel application has now been registered in Azure AD. To test that the connection is working, select Connect.
In the Navigator, you should see the tables and data you have access to in CDF.
Verify that the configuration is successful: Sign in to Power BI Desktop with a non-admin identity to confirm that regular users in your Azure AD can sign in and retrieve data from the CDF project.