Skip to content
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.

Commit 60f058a

Browse files
author
Sam Cedarbaum
committedOct 29, 2019
Add images, address PR comments
1 parent 625a160 commit 60f058a

File tree

6 files changed

+28
-34
lines changed

6 files changed

+28
-34
lines changed
 

‎articles/stream-analytics/blob-output-managed-identity.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ This article shows you how to enable Managed Identity for the Blob output(s) of
1818

1919
1. Create a new Stream Analytics job or open an existing job in the Azure portal. From the menu bar located on the left side of the screen, select **Managed Identity** located under **Configure**. Ensure that "Use System-assigned Managed Identity" is selected and then click the **Save** button on the bottom of the screen.
2020

21-
![Configure Stream Analytics managed identity](./media/stream-analytics-managed-identities-blob-output-preview/stream-analytics-enable-managed-identity.png)
21+
![Configure Stream Analytics managed identity](./media/common/stream-analytics-enable-managed-identity.png)
2222

2323
2. In the output properties window of the Azure Blob storage output sink, select the Authentication mode drop-down and choose **Managed Identity**. For information regarding the other output properties, see [Understand outputs from Azure Stream Analytics](./stream-analytics-define-outputs.md). When you are finished, click **Save**.
2424

Loading

‎articles/stream-analytics/powerbi-output-managed-identity.md

Lines changed: 27 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -10,31 +10,33 @@ ms.date: 10/18/2019
1010

1111
# Use Managed Identity to authenticate your Azure Stream Analytics job to Power BI (Preview)
1212

13-
[Managed Identity authentication](../active-directory/managed-identities-azure-resources/overview.md) for output to Power BI is now available for Azure Stream Analytics as a preview. This gives Stream Analytics jobs direct access to a workspace within your Power BI account. This feature allows for deployments of Stream Analytics jobs to be fully automated, since it is no longer required for a user to interactively login via the Azure Portal.
13+
[Managed Identity authentication](../active-directory/managed-identities-azure-resources/overview.md) for output to Power BI is available for Azure Stream Analytics as a preview. This gives Stream Analytics jobs direct access to a workspace within your Power BI account. This feature allows for deployments of Stream Analytics jobs to be fully automated, since it is no longer required for a user to interactively login to Power BI via the Azure Portal. Additionally, long running jobs that write to Power BI are now better supported, since you will not need to periodically re-authorize the job.
1414

1515
This article shows you how to enable Managed Identity for the Power BI output(s) of a Stream Analytics job through the Azure portal and through an Azure Resource Manager deployment.
1616

1717
## Prerequisites
1818

1919
The following are required for using this feature:
2020

21-
1. A Power BI account with a Pro license
21+
1. A Power BI account with a [Pro license](https://docs.microsoft.com/power-bi/service-admin-purchasing-power-bi-pro).
2222

2323
2. An upgraded workspace within your Power BI account. See [Power BI's announcement](https://powerbi.microsoft.com/en-us/blog/announcing-new-workspace-experience-general-availability-ga/) of this feature for more details.
2424

2525
## Create a Stream Analytics job using the Azure portal
2626

27-
1. Create a new Stream Analytics job or open an existing job in the Azure portal. From the menu bar located on the left side of the screen, select **Managed Identity** located under **Configure**. Ensure that "Use System-assigned Managed Identity" is selected and then click the **Save** button on the bottom of the screen.
27+
1. Create a new Stream Analytics job or open an existing job in the Azure portal. From the menu bar located on the left side of the screen, select **Managed Identity** located under **Configure**. Ensure that "Use System-assigned Managed Identity" is selected and then select the **Save** button on the bottom of the screen.
2828

29-
![Configure Stream Analytics managed identity](./media/stream-analytics-managed-identities-blob-output-preview/stream-analytics-enable-managed-identity.png)
29+
![Configure Stream Analytics managed identity](./media/common/stream-analytics-enable-managed-identity.png)
3030

31-
2. In the output properties window of the Power BI output sink, select the Authentication mode drop-down and choose **Managed Identity**. For information regarding the other output properties, see [Understand outputs from Azure Stream Analytics](./stream-analytics-define-outputs.md). When you are finished, click **Save**.
31+
2. Before configuring the output, give the Stream Analytics job access to your Power BI workspace by following the directions in the [Give the Stream Analytics job access to your Power BI workspace](#give-the-stream-analytics-job-access-to-your-powerbi-workspace) section of this article.
3232

33-
<!--
34-
Image placeholder: photo of Power BI output blade.
35-
-->
33+
3. Navigate to the **Outputs** section of your Stream Analytic's job, select **+ Add**, and then choose **Power BI**. Then, select the **Authorize** button and login with your Power BI account.
3634

37-
3. Now that the job is created, see the [Give the Stream Analytics job access to your Power BI workspace](#give-the-stream-analytics-job-access-to-your-powerbi-workspace) section of this article.
35+
![Authorize with Power BI account](./media/stream-analytics-powerbi-output-managed-identity/stream-analytics-authorize-powerbi.png)
36+
37+
4. Once authorized, a dropdown list will be populated with all of the workspaces you have access to. Select the workspace that you authorized in the previous step. Then select **Managed Identity** as the "Authentication mode". Finally, select the **Save** button.
38+
39+
![Configure Power BI output with Managed Identity](./media/stream-analytics-powerbi-output-managed-identity/stream-analytics-configure-powerbi-with-managed-id.png)
3840

3941
## Azure Resource Manager deployment
4042

@@ -77,7 +79,7 @@ Using Azure Resource Manager allows you to fully automate the deployment of your
7779
"properties":{
7880
"dataset": "dataset_name",
7981
"table": "table_name",
80-
"groupId": "ae969eeb-e7a2-436e-aba3-851e948584bc",
82+
"groupId": "01234567-89ab-cdef-0123-456789abcdef",
8183
"authenticationMode": "Msi"
8284
}
8385
}
@@ -99,31 +101,31 @@ Using Azure Resource Manager allows you to fully automate the deployment of your
99101
2. After the job is created, you can use Azure Resource Manager to retrieve the job's full definition.
100102

101103
```azurecli
102-
az resource show --ids /subscriptions/{SUBSCRIPTION_ID}/resourceGroups/{RESOURCE_GROUP}/providers/Microsoft.StreamAnalytics/StreamingJobs/{RESOURCE_NAME}
104+
az resource show --ids /subscriptions/<subsription-id>/resourceGroups/<resource-group>/providers/Microsoft.StreamAnalytics/StreamingJobs/<resource-name>
103105
```
104106

105107
The above command will return a response like the below:
106108

107109
```json
108110
{
109-
"id": "/subscriptions/{SUBSCRIPTION_ID}/resourceGroups/{RESOURCE_GROUP}/providers/Microsoft.StreamAnalytics/streamingjobs/{RESOURCE_NAME}",
111+
"id": "/subscriptions/<subscription-id>/resourceGroups/<resource-group>/providers/Microsoft.StreamAnalytics/streamingjobs/<resource-name>",
110112
"identity": {
111-
"principalId": "{PRINCIPAL_ID}",
112-
"tenantId": "{TENANT_ID}",
113+
"principalId": "<principal-id>",
114+
"tenantId": "<tenant-id>",
113115
"type": "SystemAssigned",
114116
"userAssignedIdentities": null
115117
},
116118
"kind": null,
117119
"location": "West US",
118120
"managedBy": null,
119-
"name": "{RESOURCE_NAME}",
121+
"name": "<resource-name>",
120122
"plan": null,
121123
"properties": {
122124
"compatibilityLevel": "1.0",
123125
"createdDate": "2019-07-12T03:11:30.39Z",
124126
"dataLocale": "en-US",
125127
"eventsLateArrivalMaxDelayInSeconds": 5,
126-
"jobId": "{JOB_ID}",
128+
"jobId": "<job-id>",
127129
"jobState": "Created",
128130
"jobStorageAccount": null,
129131
"jobType": "Cloud",
@@ -134,49 +136,41 @@ Using Azure Resource Manager allows you to fully automate the deployment of your
134136
"name": "Standard"
135137
}
136138
},
137-
"resourceGroup": "{RESOURCE_GROUP}",
139+
"resourceGroup": "<resource-group>",
138140
"sku": null,
139141
"tags": null,
140142
"type": "Microsoft.StreamAnalytics/streamingjobs"
141143
}
142144
```
143145

144-
Take note of the **principalId** from the job's definition, which identifies your job's Managed Identity within Azure Active Directory and will be used in the next step to grant the Stream Analytics job access to the storage account.
145-
146146
3. Now that the job is created, see the [Give the Stream Analytics job access to your Power BI workspace](#give-the-stream-analytics-job-access-to-your-powerbi-workspace) section of this article.
147147

148148

149149
## Give the Stream Analytics job access to your Power BI workspace
150150

151-
### Grant access via Power BI portal
151+
Now that the Stream Analytics job has been created, it can be given access to a Power BI workspace.
152152

153-
154-
1. Navigate to the Workspace's access settings.
153+
1. Navigate to the workspace's access settings. See this article for more details: [Give access to your workspace](https://docs.microsoft.com/en-us/power-bi/service-create-the-new-workspaces#give-access-to-your-workspace).
155154

156155
2. Type the name of your Stream Analytics job in the text box and select **Contributor** as the access level.
157156

158-
3. Click **Add** and close the pane.
159-
160-
<!--
161-
Image placeholder: Photo of Power BI ACL page.
162-
-->
163-
157+
3. Select **Add** and close the pane.
164158

165-
### Grant access via the command line
159+
![Add Stream Analytics job to Power BI workspace](./media/stream-analytics-powerbi-output-managed-identity/stream-analytics-add-job-to-powerbi-workspace.png)
166160

167-
**TODO**
168161

169162
## Limitations
170-
Below are the current limitations of this feature:
163+
Below are the limitations of this feature:
171164

172-
1. Classic Power BI workspaces
165+
1. Classic Power BI workspaces are not supported.
173166

174167
2. Azure accounts without Azure Active Directory.
175168

176169
3. Multi-tenant access is not supported. The Service principal created for a given Stream Analytics job must reside in the same Azure Active Directory tenant in which the job was created, and cannot be used with a resource that resides in a different Azure Active Directory tenant.
177170

178-
4. [User Assigned Identity](../active-directory/managed-identities-azure-resources/overview.md) is not supported. This means the user is not able to enter their own service principal to be used by their Stream Analytics job. The service principal must be generated by Azure Stream Analytics.
171+
4. [User Assigned Identity](../active-directory/managed-identities-azure-resources/overview.md) is not supported. This means you are not able to enter your own service principal to be used by their Stream Analytics job. The service principal must be generated by Azure Stream Analytics.
179172

180173
## Next steps
181174

175+
* [Power BI dashboard integration with Azure Stream Analytics](./stream-analytics-power-bi-dashboard.md)
182176
* [Understand outputs from Azure Stream Analytics](./stream-analytics-define-outputs.md)

0 commit comments

Comments
 (0)
Please sign in to comment.