Skip to content

power-bi-report-server-integration-configuration-manager.md

Latest commit

 

History

History
171 lines (94 loc) · 13.8 KB

power-bi-report-server-integration-configuration-manager.md

File metadata and controls

171 lines (94 loc) · 13.8 KB
title Power BI Report Server Integration (Configuration Manager)
description Learn how to integrate your report server with Power BI.
ms.reviewer randolphwest
ms.date 01/07/2026
ms.service reporting-services
ms.subservice report-server
ms.topic how-to
ms.custom
updatefrequency5
sfi-image-nochange

Integrate Power BI Report Server by using the configuration manager

[!INCLUDE ssrs-appliesto] [!INCLUDE ssrs-appliesto-2016-and-later] [!INCLUDE ssrs-appliesto-pbirsi]

Learn how to use the Power BI Integration page in the [!INCLUDE ssRSnoversion] configuration manager to register the report server with your preferred Microsoft Entra tenant.

This process enables users of the report server to pin supported report items to [!INCLUDE sspowerbi] dashboards. For a list of items that you can pin, see Pin Reporting Services paginated report items to dashboards in Power BI.

[!INCLUDE ssrs-no-pin-2-power-bi]

Requirements for Power BI integration

You need an active internet connection to browse to the [!INCLUDE sspowerbi] service.

Your organization must use Microsoft Entra ID (formerly Azure Active Directory), which provides directory and identity management for Azure services and web applications. For more information, see What is Microsoft Entra ID?.

The [!INCLUDE sspowerbi] dashboard that you want to pin report items to must be part of a Microsoft Entra tenant. A tenant is created automatically the first time your organization subscribes to Azure services such as Microsoft 365 and Microsoft Intune. Unmanaged tenants aren't supported.

The user who performs the [!INCLUDE sspowerbi] integration needs to be:

  • A member of the Microsoft Entra tenant.
  • A [!INCLUDE ssRSnoversion] system administrator.
  • A system administrator for the ReportServer catalog database.

The user who performs the [!INCLUDE sspowerbi] integration needs to start the [!INCLUDE ssRSnoversion] configuration manager either with the account that was used to install [!INCLUDE ssRSnoversion], or the account that the [!INCLUDE ssRSnoversion] service is running under.

You need to configure the server where Reporting Services is installed to use TLS 1.2 or newer. For more information, see Transport Layer Security (TLS) best practices with the .NET Framework.

Reports that you want to pin from must use stored credentials. Stored credentials aren't required for the [!INCLUDE sspowerbi] integration, but you need them to refresh the pinned items.

When you pin a report item, a [!INCLUDE ssRSnoversion] subscription is created that manages the refresh schedule of the tiles in [!INCLUDE sspowerbi]. [!INCLUDE ssRSnoversion] subscriptions require stored credentials.

If a report doesn't use stored credentials, a user can still pin report items, but when the associated subscription attempts to refresh the data to [!INCLUDE sspowerbi], you see an error message similar to the following example on the My Subscriptions page: PowerBI Delivery error: dashboard: IT Spend Analysis Sample, visual: Chart2, error: The current action cannot be completed. The user data source credentials do not meet the requirements to run this report or shared dataset. Either the user data source credential.

For more information on how to store credentials, see Configure stored credentials for a report-specific data source in Store Credentials in a Reporting Services Data Source.

An administrator can review the [!INCLUDE ssRSnoversion] log files for more information. They see an alert that's similar to the following messages:

subscription!WindowsService_1!1458!09/24/2015-00:09:27:: e ERROR: PowerBI Delivery error: dashboard: IT Spend Analysis Sample, visual: Chart2, error: The current action cannot be completed. The user data source credentials do not meet the requirements to run this report or shared dataset. Either the user data source credentials are not stored in the report server database, or the user data source is configured not to require credentials but the unattended execution account is not specified.

notification!WindowsService_1!1458!09/24/2015-00:09:27:: e ERROR: Error occurred processing subscription fcdb8581-d763-4b3b-ba3e-8572360df4f9: PowerBI Delivery error: dashboard: IT Spend Analysis Sample, visual: Chart2, error: The current action cannot be completed. The user data source credentials do not meet the requirements to run this report or shared data set. Either the user data source credentials are not stored in the report server database, or the user data source is configured not to require credentials but the unattended execution account is not specified.

You can review and monitor [!INCLUDE ssRSnoversion] logs files by using [!INCLUDE msCoName] Power Query with the files. For more information and to watch a short video, see Report server service trace log.

Integrate and register the report server

Complete the following steps from the [!INCLUDE ssRSnoversion] configuration manager. For more information, see What is the Report Server configuration manager (native mode)?.

  1. Select the [!INCLUDE sspowerbi] integration page.

  2. Select Register with Power BI. Make sure that port 443 isn't blocked.

  3. In the [!INCLUDE msCoName] sign-in dialog, enter the credentials that you use to sign in to [!INCLUDE sspowerbi].

  4. After you register, the Power BI Registration Details section displays the Azure tenant ID and the redirect URLs. Redirect URLs are used as part of the sign-in and communication process so that the [!INCLUDE sspowerbi] dashboard can communicate with the registered report server.

  5. Select the Copy button in the Results window to copy the registration details to the Windows clipboard. Save them for future reference.

Unregister With Power BI

When you unregister the report server from Microsoft Entra ID, the result is:

  • You can't see the My Settings link from the web portal's menu bar.

  • Report items that you pinned are still pinned to dashboards, but the tiles aren't updated on the dashboard.

  • The [!INCLUDE ssRSnoversion] subscriptions that updated the tiles still exist on the report server. When they run on their configured schedule, they show an error message similar to The delivery extension for this subscription could not be loaded.

To unregister, select Power BI > Unregister with Power BI in the configuration manager.

Update registration

Use the Update Registration option if you changed the configuration of your report server. For example, you might want to add or remove the URLs that users use to browse to the [!INCLUDE ssRSWebPortal].

  1. In the [!INCLUDE ssRSnoversion] configuration manager, select Web Portal URL > Advanced.

  2. Select Add to add a new HTTP identity for the [!INCLUDE ssRSWebPortal], and then select OK.

    The [!INCLUDE sspowerbi] icon changes to indicate the change to the server configuration.

    :::image type="content" source="media/ssrs-powebi-icon-warning.png" alt-text="Screenshot of Image that shows the updated icon.":::

  3. On the Power BI Integration page, select Update Registration. When the prompt appears, sign in to Microsoft Entra ID. The page refreshes and the new URL is listed under Redirect URLs.

Integrate your report server with Power BI

  1. In the configuration manager, select the Register with Power BI button. When the prompt appears, sign in to Microsoft Entra ID.

  2. The [!INCLUDE sspowerbi] client app is registered with your managed tenant.

  3. The Power BI client app is created in your managed tenant within Microsoft Entra ID.

The registration includes redirect URLs that are used when users sign in from the report server. The app ID and URLs are saved to the ReportServer database. The redirect URL is used during authentication calls to Azure so that the call can return to the report server. For example, it's used when users sign in or pin items to a dashboard.

You can see the app ID and URLs in the configuration manager.

:::image type="content" source="media/ssrs-pbiflow-integration.png" alt-text="Diagram that shows the workflow.":::

Pin a report item to a dashboard

You can preview reports in the [!INCLUDE ssRSnoversion] [!INCLUDE ssRSWebPortal]. You can also preview reports the first time that you pin a report item from the [!INCLUDE ssRSWebPortal].

  1. You can sign in through the Microsoft Entra sign-in page or from the My Settings page in the [!INCLUDE ssRSWebPortal]. When you sign in to the Azure-managed tenant, a relationship is established between your Azure account and the [!INCLUDE ssRSnoversion] permissions. For more information, see My Settings for Power BI integration (web portal).

  2. A user security token is returned to the report server.

  3. The user security token is saved to the ReportServer database.

  4. A list of groups and dashboards that you have access to is retrieved from the [!INCLUDE sspowerbi] service. Select the destination group and dashboard. Configure how often the data refreshes on the [!INCLUDE sspowerbi] tile.

  5. The report item is pinned to the dashboard.

  6. A [!INCLUDE ssRSnoversion] subscription is created. The subscription manages the scheduled refresh of the report item to the dashboard tile. The subscription uses the security token that was created when you signed in.

The token is good for 90 days. Users then need to sign in again to create a new user token. When the token is expired, you still see the pinned tiles on the dashboard but the data doesn't refresh.

The [!INCLUDE ssRSnoversion] subscriptions that are used for the pinned items error until a new user token is created. For more information, see My Settings for Power BI integration (web portal).

The second time you pin an item, you don't need to follow steps 1-4. You can start with step 5 because the app ID and URLs are retrieved from the ReportServer database.

:::image type="content" source="media/ssrs-pin-to-powerbi-flow.png" alt-text="Diagram that shows what happens when a user pins a report item to a dashboard." lightbox="media/ssrs-pin-to-powerbi-flow.png":::

When a subscription fires to refresh a dashboard tile:

  1. When the [!INCLUDE ssRSnoversion] subscription fires, the report is rendered.

  2. The user token is retrieved from the ReportServer database.

  3. The report item state and data is sent with the token to the [!INCLUDE sspowerbi] service.

  4. The token is sent to Microsoft Entra ID for validation. If the token is valid, the report item data is sent to the dashboard tile and the date property of the tile updates.

  5. If the token isn't valid, an error is returned and logged with the report server. No status or other information is sent to the dashboard.

:::image type="content" source="media/ssrs-subscription-to-powerbi-flow.png" alt-text="Diagram that shows what happens when a subscription fires to refresh a dashboard tile.":::

[!VIDEO https://www.youtube-nocookie.com/embed/QhPQObqmMPc]

Considerations and limitations

Viral and government tenants aren't supported.

Related content