To enable Zone Data Portal (ZDP) to authenticate through Azure AD and securely display embedded Power BI reports, your IT team must configure the ZDP Azure App Registration with the required API permissions.
Please follow the steps below within your Azure tenant:
Step 1. App Registration Permissions
- Go to Azure Active Directory > App registrations.
- Locate the ZDP application:
- Name: Zone Data Portal
- Client ID: 71907356-5605-4a0c-8d30-38c2bd61c2e7
- Navigate to API permissions and add the following delegated permissions:
- Microsoft Graph
- View users’ email (email)
- View users’ basic profile (openid, profile)
- Sign in and read user profile (User.Read)
- Maintain access to data you have given it access to (offline_access)
- Power BI Service
- Report.Read.All
- Report.Read.All
- Microsoft Graph
Step 2. Grant Admin Consent
- After adding the permissions above, click Grant admin consent for [Tenant Name].
- Confirm that the status for each permission shows as Granted.
Step 3. Verification: Once completed, the ZDP app will be able to:
- Authenticate users using Azure AD.
- Respect each user’s Power BI access rights.
- Display embedded Power BI reports in the Zone Data Portal.
If not completed correctly you will receive this error:
The following will confirm permissions above have been set up correctly BUT you will need to permissions from the report owner/admin to grant access to report:
The following will confirm permissions above have been set up correctly BUT you will need to upgrade license to view report: