Azure Service Principal Setup and Permission Settings

Service principals are a Microsoft Entra ID app registration you create within your tenant to perform unattended resource and service level operations. They're a unique type of user identity with an app name, application ID, tenant ID, and client secret or certificate for a password.

Automate Power BI Premium workspace and semantic model tasks with service principals - Power BI | Microsoft Learn

Create a Service Principal in Azure

To configure Service Principal and Permission settings, we can follow the below steps.

Create App Registration in Microsoft Entra ID and create new secret. This secret would be used to configure the Power BI cloud account in FlexDeploy. No need to assign any permissions from Azure Portal.

Create a group say PowerBICICDGroup and assign the service principal created in previous step

Assign permissions to the Service principal in Power BI Admin Portal

Launch Power BI , go to Admin portal and assign the group to “Allow Service Principals to use Power BI APIs”. It would look similar to below:

Once this is done, we need to add the service principal App to the respective workspaces as Contributor, from where you will export the contents or import the contents to