Onboard a Microsoft Power BI App to SSPM
Table of Contents
Onboard a Microsoft Power BI App to SSPM
Connect a Microsoft Power BI instance to SSPM to detect posture risks.
High-level configuration scanning across Office 365
products is available by onboarding the Office 365 app. Adding the
Microsoft Power BI app individually gives you greater visibility into Microsoft
Power BI settings.
For SSPM to detect posture risks in your Microsoft Power BI instance, you must
onboard your Microsoft Power BI instance to SSPM. Through the onboarding process,
SSPM logs in to Microsoft Power BI using administrator account credentials. SSPM
uses this account to scan your Microsoft Power BI instance for misconfigured
settings. If there are misconfigured settings, SSPM suggests a remediation action
based on best practices.
SSPM gets access to your Microsoft Power BI instance by using Okta SSO credentials
that you provide during the onboarding process. For this reason, your organization
must be using Okta as an identity provider. The Okta account must be configured for
multi-factor authentication (MFA) using one-time passcodes.
To onboard your Microsoft Power BI instance, you complete the following actions:
Collect Information for Connecting to Your Microsoft Power BI Instance
To access your Microsoft Power BI instance, SSPM requires the following
information, which you will specify during the onboarding process.
| Item | Description |
|---|---|
| User | An email address of an Okta user account.
Required Permissions: The user must be
assigned to the Microsoft Global Admin role. |
| Password | The password for the Okta user account. |
| Okta Domain | The Okta subdomain for your organization. The subdomain was included in the login URL that Okta assigned to your organization. |
| MFA Secret Key | A key that is used to generate one-time passcodes for multi-factor authentication. |
As you complete the following steps, make note of the values of the items
described in the preceding table. You will need to enter these values during
onboarding to access your Microsoft Power BI instance from SSPM.
- Identify the Okta user account that SSPM will use to access your Microsoft Power BI instance. The user must be assigned to the Microsoft Global Admin role.
Connect SSPM to Your Microsoft Power BI Instance
By adding a Microsoft Power BI app in SSPM, you enable SSPM to connect to your Power BI instance.- From the Add Application page ( ), click the Power BI tile.Under posture security instances, Add Instance or, if there is already an instance configured, Add New instance.Choose the option to Log in with Okta.Enter the user credentials, Okta domain, and MFA secret key for accessing your Microsoft Power BI instance and Connect.
