Introduction

Microsoft Power BI is a business intelligence (BI) platform that provides nontechnical business users with tools for aggregating, analyzing, visualizing and sharing data. Microsoft Power BI is used to find insights within an organization's data. Power BI can help connect disparate data sets, transform and clean the data into a data model and create charts or graphs to provide visuals of the data. All of this can be shared with other Power BI users within the organization.


How it works?

  1. Prerequisite
  2. Create the Report in Power BI Desktop.
  3. Upload the Report to Power BI Service.
  4. Configure the Power BI App in Azure Active Directory.
  5. Configure the Developer setting in Power BI Service.
  6. Configure the Advanced Reports in SigningHub Admin.
  7. View the Advanced Reports in SigningHub Admin.
  8. Assign the Advanced Reports to Enterprise..
  9. Configure the Advanced Reports in SigningHub Web.
  10. View the Advanced Reports in SigningHub Web.


Prerequisite

This section will focus on the process of setting up a Power BI Gateway in Power BI Service, which allows a dataset to access data sources. Setting up a Power BI Gateway is essential when your data source is on-premises (not in the cloud). It involves downloading and installing the gateway software, saving credentials, signing in with the appropriate account, and mapping the dataset to the gateway to enable data access. The specific type of gateway required in case of local server data sources is "On-Premises Gateway".
  1. Only the "Power BI Premium Per User" license will be used for the user responsible for SigningHub Embedding.
  2. We recommend using a database user for the Power BI who only has "read only" access.


  1. For first-time users, it's necessary to configure a Power BI Gateway in the Power BI Service. This gateway is required to enable datasets to connect to data sources.
  2. If the data source is hosted in the cloud (e.g., Azure SQL Database), you can skip this setup process. However, if the data source is on a local server, you need to download and install the Power BI Gateway software on that local server.

    • Download the standard gateway.



    • In the gateway installer, keep the default installation path, accept the terms of use, and then click "Install".



    • Enter the email address for your Office 365 organization account, and then click "Sign in". You are now signed in to your account.



    • Select "Register a new gateway on this computer" and then click on "Next".



    • Enter a name for the gateway. The name must be unique across the tenant. Also enter a recovery key. You'll need this key if you ever want to recover or move your gateway. Once done, click on "Configure".
  1. You are responsible for keeping the gateway recovery key in a safe place where it can be retrieved later. Microsoft doesn't have access to this key and it can't be retrieved by us. 




    • Review the information in the final window. Because this example uses the same account for Power BI, Power Apps, and Power Automate, the gateway is available for all three services.
    • Click on "Close".



    • Now that you've installed a gateway, you can add another gateway to create a cluster. 
  1. A cluster lets gateway admins avoid having a single point of failure for on-premises data access. If the primary gateway is unavailable, data requests are routed to the second gateway that you add, and so on. Because you can install only one standard gateway on a computer, you must install each additional gateway in the cluster on a different computer. This requirement makes sense because you want redundancy in the cluster. 
  2. Offline gateway members within a cluster will negatively impact performance. These members should either be removed or disabled. 
  3. Make sure the gateway members in a cluster are running the same gateway version, as different versions could cause unexpected failures based on supported functionality. 
  4. To create high-availability gateway clusters, you need the November 2017 update or a later update to the gateway software. 
    • Download the gateway to a different computer and install it. 
    • After you sign in to your Office 365 organization account, register the gateway. Select "Add to an existing cluster". In the "Available gateway clusters" list, select the primary gateway, which is the first gateway you installed. Enter the recovery key for that gateway. Select "Configure".


  1. You need to sign in to Power BI Gateway using the same account that you use for Power BI Service or Power BI Desktop. This ensures proper authentication and access to the data sources.
  2. Once you sign in, the Data Gateway becomes available in the Power BI Service's Datasets page.
  3. From the Datasets page in Power BI Service, you can select the Data Gateway you've set up, and then the dataset will be mapped to this gateway. This mapping allows the dataset to use the gateway for accessing data.



Create the Report in Power BI Desktop

This section will focus on the process of creating a report using Power BI Desktop, from connecting to your data source to designing and customizing your visualizations.


  1. If you haven't already, download and install Power BI Desktop. Open the application.
  2. Click on "Get Data" to connect to your data source and load the data into Power BI Desktop. 


    • Choose the "SQL Server" as the data source, and load the data into Power BI Desktop.



    • In the dialog box, provide the "Server", "Database", "Data Connectivity Mode", and the "SQL statement" information, and click on "OK".



    • Provide a Username, Password, and then click on "Connect".



    • From the "Encryption Support" dialog, click the "Ok" button.



  1. The Power Query Editor will be used to transform and shape the data as needed. Click on the "Transform Data" button. 



  2. Perform data filtration, and aggregations to group and summarize data to make it more manageable and useful. Click on the "Close and Apply" button.



  3. Build your visualizations by selecting fields and dragging them onto the report canvas. Customize and format your visualizations as necessary.



  4. Design the report layout by adding pages, text boxes, images, and other elements to provide context and explanations.
  5. Click on "Publish" and select an enterprise to which you want to publish the report to.
  1. All the reports are enterprise specific and should be placed in the relevant workspace in Power BI Service.
  2. When configuring for the first time, the following configurations will need to be done after clicking on the "Select" button, as per the last step:
    • A dialog will appear, click on the "Open dataset settings".



    • The dataset settings will appear, in Power BI Service, click on the "Add to gateway" button.



    • In the "New Connection" dialog, provide the highlighted information. Click on the "Create" button.





    • Click on the "Apply" button. The gateway connection will be updated.



    • The report will now be visible in Power BI Service.
  1. In case of Oracle, the following steps will be followed to "Get Data" from the data source:





Upload the Report in Power BI Service

This section will focus on the transition from Power BI Desktop to the Power BI Service to publish and share your report, enabling collaboration and access for others in your organization.


  1. Click on "Publish" in Power BI Desktop. Sign in with your Power BI account if prompted. Choose a workspace in the Power BI Service where you want to publish the report.



  2. Open a web browser and go to the Power BI Service (https://app.powerbi.com). Sign in with your Power BI account credentials.



  3. On the left-hand side of the Power BI Service interface, you'll see the navigation pane. Click on "Workspaces" to access your workspaces.

  • To create a new workspace:


    • Click on "Workspaces" to access your workspaces. Click on the "New workspace" button.



    • Provide the name, contacts list, and license. Click on the "Apply" button to create the workspace..







  • For an existing workspace:


    • Click on "Workspaces" to access your workspaces.



    • Allow the "Premium per-user" license against a workspace, click on the "More Options" button against the workspace name, and select "Workspace Settings". 



    • From the Premium tab, select the "Premium per-user" license




  1. To allow collaborators to access the workspace, click on the "More Options" button against the workspace name, and select "Workspace Access". 



  1. Click the "Add people or groups" button. Enter the email addresses of the collaborators you want to invite, or provide the name of the Power BI application that you have registered in Azure Active Directory (this is covered in the next step). Assign either an Admin, Member. or a Contributor role, based on your requirements.
  1. Admin Role: An admin has full control over the workspace. They can add or remove members, publish content, and manage settings.
  2. Member Role: A member has access to the content within the workspace based on their roles and permissions. They can view, edit, and publish content as allowed by the workspace settings.
  3. Contributor Role: A contributor can edit and publish content within the workspace, but they might have limitations on certain actions, such as adding or removing members.
  4. Viewer Role: A viewer can not make changes to the content.






Create the Power BI App in Azure Active Directory

This section will focus on the creation of the Power BI app in the Microsoft Azure Active Directory. The Power BI app in the Microsoft Azure Active Directory establishes permissions for Power BI REST resources and enables access to the Power BI REST APIs; otherwise, we cannot use Power BI resources.


  1. Sign in to the Azure portal using your Azure Active Directory administrator account.



  2. Click on the "App Registrations" button from the Azure services section.



  3. Click on the "New application" button.



  4. Enter the name for the app, and select the "Supported account types". Click on the "Register" button.



  5. You will be taken to the app overview screen. Select "API permissions" from the left tab



  6. From the "API permissions" screen, click on "Add a permission" button. From the "Request API permissions" tab, scroll down and click on "Power BI Service".



  7. Click on "Delegated Permissions".



  8. Search for and select "Workspace". Select the "Workspace.Read.All" permission.



  9. Search for and select "Report". Select the "Report.Read.All" permission.



  10. Search for and select "Dataset". Select the "Dataset.Read.All" permission. Click on the "Add permissions" button.



  11. Click on the "Grant admin consent for [Directory Name]" button and from the pop-up, select "Yes".



  12. Select “Certificates & secrets” from the left tab. Create a new client secret by clicking on the “New client secret” button. Save the client secret for use in the SigningHub Admin.



  13. Get the Application (client) ID, and Directory (tenant) ID from “Overview”, for use in the SigningHub Admin.



Configure Developer Settings in Power BI Service

This section will focus on the developer settings that need to be enabled in the Power BI Service.


  1. Go to the Power BI Service (https://app.powerbi.com). Sign in with your Power BI account credentials.
  2. Click on the Settings Icon from the header, and then select the "Admin portal".



  3. Scroll down to "Developer settings".
  4. Click on the "Embed content in apps" option. Enable the radio button, and then select the "The entire organization" option.



  5. Click on "Apply" to save the changes.
  6. Click on the "Service principals can use Fabric APIs" option. Enable the radio button, and then select the "The entire organization" option.



  7. Click on "Apply" to save the changes.



Configure the Advanced Reports in SigningHub Admin

This section will focus on the configuration of the Advanced Reports in the SigningHub Admin.


  1. Access the SigningHub Admin portal.
  2. Click the "Access Control" section from the left menu and click on the "Roles" tab.



  3. Edit the role, go to the "Details" section, and check the "Advanced Reports" checkbox. Click on the "Finish" button.



  4. Click the "Configurations" section from the left menu and click on the "Advanced Reports" tab.



  5. Check the "Enable Advanced Reporting" check box and enter the details. Use the information from step 12 and 13 of the Create the Power BI App in Azure Active Directory.



  6. Specify the details accordingly and click the "Save" button. See the below table for the description of the fields.

Advanced Reports Configuration

Fields

Description

Enable Advanced Reporting

Tick this check box to enable the advanced reports functionality for your SigningHub deployment. When this check box is checked, the Advanced Reports Section will become visible in the SigningHub Admin. By default, this checkbox is unchecked.
If you do not intend to use the advanced reports functionality, keep this check box unchecked. This will hide the Advanced Reports section from SigningHub Admin.

Client ID 

Specify the registered client ID that has been provided by Azure Active Directory during account configuration, e.g. "d6920aa5-258b-a520-b0gh-870503xv8b4d". 
SigningHub will use this ID to communicate with the Azure Active Directory server.

Client Secret

Specify the client secret that has been provided by Azure Active Directory during account configuration, e.g. "hniZYHqPEcKy6H25-LjzSX0Q".

Tenant ID

Specify the tenant ID as provided by Microsoft Azure at the time of app registration.



  1. For PowerBI reporting, add the following URL in the default-src of Web and Admin Content Security Policy: 
    https://app.powerbi.com/



View the Advanced Reports in SigningHub Admin

This section will focus on viewing the Advanced Reports in the SigningHub Admin.


  1. Click the "Advanced Reports" option from the left menu.
  2. Select an available workspace from the "Workspace" drop down and select an available report from the "Report" drop down.



  3. Click on the "Load Report" button. And the selected report will load up. 




Assign the Advanced Reports to an Enterprise

This section will focus on assigning the Advanced Reports to an Enterprise Owner so that they could view the Advanced Reports related to the assigned enterprise.


  1. Click the "Accounts" option from the left menu.
  2. Search the "Enterprise Owner" whom you want to allow the Advanced Reports. Now click  adjacent to it, and then select the "Advanced Reports" option.



  3. The "Advanced Report Settings" dialog will appear. Select the "Workspace ID" from the drop down, for which you want the advanced reports to be visible to the Enterprise Owner. Click on the "Save" button.
  1. Advanced Reports are not available for an Individual user.
  2. The workspace is enterprise specific and should be carefully assigned to the relevant enterprise.




Configure the Advanced Reports in SigningHub Web

This section will focus on the configuration of the Advanced Reports in the SigningHub Web.


  1. Log into SigningHub Web with your enterprise owner credentials.
  2. Click your profile drop down menu (available at the top right corner).
  3. Click the "Enterprise Settings" option.
  4. Click the "Roles" option from the left menu.



  5. Click on the   icon adjacent to the role which you want to edit. The "Edit Role" screen will appear.



  6. Click the "Enterprise Settings" tab. Select the check box against the "Enterprise Advanced Reports". Click on "Save". For the changes to take effect, log in to SigningHub Web again.
  1. The "Advanced Reports" will only be visible to the enterprise owner, and its child users (if the "Advanced Enterprise Reports" configuration is allowed against their role).




View the Advanced Reports in SigningHub Web

This section will focus on viewing the Advanced Reports in the SigningHub Web.


  1. Click your profile drop down menu (available at the top right corner).
  2. Click the "Enterprise Settings" option.
  3. Click the "Advanced Reports" option from the left menu.



  4. Select an available report from the "Report" drop down.



  5. Click on the "Load Report" button. And the selected report will load up. 




See Also