Power BI is currently available as a data connector. Full ontology coverage for Power BI artifacts is on the roadmap. You can connect today and your data will be staged in the pipeline. Ontology discovery support will be enabled in a future release.
Before you start
Connecting Power BI requires a one-time setup in the Microsoft Entra admin center and the Power BI admin portal. You will need access to both.- You are signed in to Syntaxia under the Data Ops function.
- You have Microsoft Entra ID admin rights, or someone who does can complete the Azure steps with you.
- You have Power BI tenant administrator access, or someone who does can toggle the required admin settings.
- Your Power BI tenant uses a Pro, Premium, or Fabric capacity. These tiers expose the admin APIs Syntaxia reads from.
What syncs
Once connected, Syntaxia ingests metadata from your Power BI tenant, including:| Entity | Notes |
|---|---|
| Workspaces | Names, IDs, and membership |
| Datasets | Dataset metadata and schema |
| Reports | Report definitions and workspace assignment |
| Dashboards | Dashboard metadata and tiles |
| Dataflows | Dataflow definitions |
| Capacities | Premium and Fabric capacity assignments |
Set up Power BI for Syntaxia
Work through these four stages in order. You will collect three values along the way, Tenant ID, Client ID, and Client Secret, which Syntaxia needs to finish the connection.Stage 1: Register an application in Microsoft Entra
Open the Entra admin center
Sign in to the Microsoft Entra admin center with an account that can register applications.
Create a new app registration
Go to Identity → Applications → App registrations, then click New registration.Enter a name like
Syntaxia Power BI Connector, leave the default Single tenant option selected, and click Register.Copy the Tenant ID and Client ID
From the app’s Overview page, copy the Directory (tenant) ID and the Application (client) ID. Save them somewhere you can paste from later.
Stage 2: Create a security group for the app
Power BI grants service principals access through a security group, not directly.Create the group
In the Entra admin center, go to Identity → Groups → All groups → New group.Set the Group type to Security and give it a name like
Syntaxia Power BI Access.Stage 3: Enable the required Power BI tenant settings
Open the Power BI admin portal
Sign in to Power BI as a tenant admin. Click the settings gear, then Admin portal, then Tenant settings.
Allow service principals to use Power BI APIs
Find Developer settings → Allow service principals to use Power BI APIs.Set the toggle to Enabled and apply it to the
Syntaxia Power BI Access security group you created. Click Apply.Allow service principals to use read-only admin APIs
Find Admin API settings → Service principals can access read-only admin APIs.Set the toggle to Enabled, choose Specific security groups, add
Syntaxia Power BI Access, and click Apply.Enhance admin API responses with detailed metadata
In the same Admin API settings section, enable Enhance admin APIs responses with detailed metadata and Enhance admin APIs responses with DAX and mashup expressions.These settings let Syntaxia read dataset schema details that feed ontology discovery.
Power BI tenant settings can take up to 15 minutes to propagate. If the Syntaxia connection fails on first attempt, wait a few minutes and try again.
Stage 4: Grant workspace access
The service principal only sees workspaces it has been added to as a member or admin. For organization-wide visibility, add theSyntaxia Power BI Access security group to every workspace you want Syntaxia to see, or use a Workspace access policy at the tenant level.
At minimum, add the security group as a Member of the workspaces you plan to include in ontology discovery.
Connect Power BI in Syntaxia
Add the source
From your Data Ops command center, click Add Source, expand the Power BI card, and enter a connection label like
Power BI - Finance or Power BI - GTM.Enter your credentials
Paste the three values you collected in Stage 1:
- Tenant ID
- Client ID
- Client Secret
After the first sync
Once your Power BI source isactive, you can:
- Resync at any time from the source card to pull the latest metadata changes.
- Reconnect if the client secret expires. You will need to generate a new secret in Entra and paste it into Syntaxia.
Troubleshooting
`Unauthorized` or `Forbidden` errors on first sync
`Unauthorized` or `Forbidden` errors on first sync
The source card is in `error`
The source card is in `error`
The most common causes are an expired client secret or a revoked app registration. Generate a new secret in Entra, then click Reconnect and paste the new value.
A workspace I expected is missing
A workspace I expected is missing
The connector only sees workspaces the service principal is a member of. Add
Syntaxia Power BI Access as a member of the missing workspace, then click Resync.Dataset schemas look empty
Dataset schemas look empty
Enable Enhance admin APIs responses with detailed metadata and Enhance admin APIs responses with DAX and mashup expressions in the Power BI admin portal. Then click Resync.
Tenant admin cannot find the toggle
Tenant admin cannot find the toggle
Some older tenants expose the developer and admin API settings under Tenant settings → Admin API settings. Search the page for
service principal to jump to the relevant rows.