We’re trying to secure our PBI account is an effective way and running into some issues.
Following this documentation, Microsoft is informing us that the PBI master account needs to be an Azure Global admin:
https://docs.microsoft.com/en-us/power-bi/developer/embed-sample-for-customersOf course this is very concerning, so we’re trying to do what we can to secure this account, here are the two options we’ve tried:
1.). I tried MFA and using app passwords for the application, but those get specific errors within the portal and always end in error. Simply doesn’t work.
2.). Then I disabled MFA because of the issues and used conditional access to only allow the account to access cloud app “Power BI Service”. This seemed to work, however a day later we had our app fail with a generic 500 pbi return, and needed to cycle this rule to get it fixed.
I guess my main question is what is the recommended security configuration when having to have a service account of this magnitude with such elevated rights?
We’re happy to follow all Microsoft best practices.
