# Setup and administration for Power BI

You can use OpenID Connect and your existing identity provider (IdP) framework to manage access to CDF data securely. We currently support Azure AD, Microsoft's cloud-based identity and access management service.

This article explains how an Azure Active Directory (AD) administrator can register and consent for an organization to use the Microsoft Power Query for Excel application and allow the Cognite Power BI Connector to impersonate and act on behalf of a user to retrieve data from a CDF project.

When you have registered the Microsoft Power Query for Excel application, users can sign in with their organizational ID and use the Cognite Power BI Connector to retrieve data from a CDF project.

NOTE

The Cognite Power BI Connector and Excel both use the Microsoft Power Query for Excel enterprise application to retrieve data from CDF. If your organization is using both the Cognite Power BI Connector app and Excel to retrieve data from CDF, you only need to register Microsoft Power Query for Excel for one of them.

# Register the Microsoft Power Query for Excel application

Follow the steps below to register the Microsoft Power Query for Excel application and allow the Cognite Power BI Connector to use it to impersonate and act on behalf of a user to retrieve data from a CDF project:

  1. First, make sure that you have:

  2. Open Power BI Desktop.

  3. On the Home tab in the ribbon, select Get Data and then More. Then, in the Get Data dialog box, select Other and the Cognite Data Fusion connector.

    Get Data

  4. Enter the CDF project that you want to connect to, for example, publicdata.

    Optional: If the CDF project is on a custom cluster, set the CDF Environment to the URL of the API server for the cluster. If you're not sure, leave the field blank.

    Sign in as an Azure AD guest user

    If you need to sign in to Azure AD as a guest user, specify your Azure AD tenant:

    Authentication

    Project

  5. In the Authentication dialog, select Organizational account, and then Sign in.

    Authentication

  6. Sign in with an Azure AD admin account, then review and consent to the permission request on behalf of your organization, and select Accept.

    Admin consent

  7. The Microsoft Power Query for Excel application has now been registered in Azure AD. To test that the connection is working, select Connect.

    Authentication

  8. In the Navigator, you should see the tables and data you have access to in CDF.

    Navigator

  9. Verify that the configuration is successful: Sign in to Power BI Desktop with a non-admin identity to confirm that regular users in your Azure AD can sign in and retrieve data from the CDF project.

Last Updated: 5/11/2021, 7:30:56 AM