Hi all,
We are in the process of integrating an Embedded PowerBI Report to Salesforce using the JS API. Our setup is the following:
- Users are already using Azure AD for SSO in order to access the application. We also use AAD for user provisioning. We have several AAD groups (fed by AD) replicating to SF for which it also manages the Roles/Profiles. That part works fine.
- We have created a Premium Workspace with dedicated capacity, in which we have created a Report.
- We have created a App Registration in Azure, to which we assigned the AAD groups. That part is used to acquire the AAD token to use with the JS API.
- For testing, we have added one team member in the Workspace as a "member"
- On the Salesforce side, we have injected the appropriate code as per documentation on JS API for Embedding
When the user launches the Salesforce page, the AAD auth prompts, token is acquired and report is shown. It works fine. (Yay!)
Now the "problem" we are trying to solve is to share the Workspace with our AAD groups. We cannot possibly manage individual access to that Workspace.
I've read the @sqlchick post https://www.sqlchick.com/entries/2016/8/6/managing-members-in-a-power-bi-group-workspace
But I'm wondering if there has been some development ever since. Is it still the only way to go?
Using this option, we would then to create an O365 group, to which we assign our AAD groups. Then a PowerShell batch script to sync the users of these AAD groups to the O365 group.
Thanks,
