Service principals are a Microsoft Entra ID app registration you create within your tenant to perform unattended resource and service level operations. They're a unique type of user identity with an app name, application ID, tenant ID, and client secret or certificate for a password.
To configure Service Principal and Permission settings, we can follow the below steps.
Create App Registration in Microsoft Entra ID and create new secret. This secret would be used to configure the Power BI cloud account in FlexDeploy. No need to assign any permissions from Azure Portal.
Create a group say PowerBICICDGroup and assign the service principal created in previous step
Launch https://app.powerbi.com/ , go to Admin portal and assign the group to “Allow Service Principals to use Power BI APIs”. It would look similar to below:
Once this is done, we need to add the service principal App to the respective workspaces as Contributor, from where you will export the contents or import the contents to
