Power BI Admin Portal Configurations

A Power BI Administrator must enable a small number of tenant settings before Mosaic can embed your content. All changes are made in the Power BI Admin Portal.

Open the Admin Portal

1. Go to the Power BI service

2. Click the Settings gear in the top-right

3. Choose Admin portal

4. Open Tenant settings in the left navigation

You will only see this option if you hold the Power BI Administrator role on the tenant.

The Power BI / Fabric Admin Portal — Tenant settings view. Use this page to enable each of the settings listed below. (The highlighted boxes in this screenshot are not the ones Mosaic requires — see the per-setting instructions below.)

Tenant settings to enable

The settings below are minimum requirements for Mosaic embedding to work for your users.

Embed content in apps

• Setting: Embed content in apps

• Where: Tenant settings → Developer settings

• Value: Enabled

• Apply to: the Microsoft Entra security group whose members will use Mosaic (recommended) — or The entire organisation if you prefer a tenant-wide allow

This is the master switch that lets Mosaic load Power BI content via the embed API on behalf of users. Without it, embedded reports return an error.

Allow XMLA endpoints and analyze in Excel

• Setting: Allow XMLA endpoints and Analyze in Excel with on-premises datasets

• Where: Tenant settings → Integration settings

• Value: Enabled (for Mosaic-using groups)

Required for Mosaic's DAX query block to execute queries against your datasets. Mosaic uses the Power BI REST API's executeQueries endpoint, which requires XMLA access on the dataset's hosting capacity.

XMLA endpoints are also a Premium / Fabric / PPU / Embedded-capacity feature. Datasets in standard (non-capacity) workspaces cannot accept Mosaic's DAX queries.

Service principals can use Power BI APIs (for AOD model and data queries)

• Setting: Service principals can use Power BI APIs

• Where: Tenant settings → Developer settings

• Value: Currently optional

Mosaic today uses the User Owns Data model - every Power BI call is on behalf of a signed-in user. Service principal permissions are not required.

If needed Mosaic can support App Owns Data (Embed Token mode) for higher-scale deployments. When that ships, you will optionally enable this setting and grant the Mosaic service principal access to your workspaces. We will publish a separate guide at that time.

Workspace-level requirements

For each Power BI workspace you intend to expose in Mosaic:

1. Confirm it is assigned to a capacity (Fabric F-SKU, Power BI Premium, PPU, or Power BI Embedded). Workspaces in shared capacity can be browsed but cannot embed for users without their own Pro license.

2. Confirm the users who will sign in to Mosaic have Viewer or higher access to the workspace in Power BI itself. Mosaic does not bypass Power BI's own access model.

Verify

The fastest way to verify the Admin Portal settings are correct is to complete the Mosaic App Configurations and embed one report end-to-end with a test user.

What's next

Mosaic App Configurations →