Power BI Provisioning
Complete the deployment and the checks described in After the Deployment before you open the template.
Overview
dab provides the AI Analyst report as a Power BI template file (.pbit). Open the template with Power BI Desktop. Power BI asks for a set of parameters and for the credentials of your database. This page describes which values to enter and how to establish the connection.
Uploading the report to a Microsoft Fabric workspace is supported. The parameter and credential steps described on this page apply the same way once the report is opened in Fabric.
Prerequisites
You need the following values before you open the template:
| Value | Where to find it |
|---|---|
| SQL Server connection string | The connection string of the database you connected during the deployment |
| SQL schema | The schema that holds the AI Analyst tables |
| API endpoint | The appServiceUrl output of the deployment, without the https:// prefix |
| API key | The AIA API Key you set during the deployment, stored in Key Vault as aia-api-key |
The connection string contains the user name and the password of the database user. Treat it as a secret.
1. Enter the Parameters
The parameter dialog opens as soon as you open the .pbit file.
| Parameter | What to enter |
|---|---|
| SQL_Server | The value after Server= in the connection string. Use the host name only, without tcp: and without ,1433.Example: test-data.database.windows.net |
| SQL_Database | The value after Initial Catalog= in the connection string.Example: aia-internal-beta-test |
| SQL_Schema | The schema that holds the AI Analyst tables. Example: dbo |
| API_Endpoint | The host name of your AI Analyst App Service. Example: app-aia-1234567890.azurewebsites.net |
| API_Key | The AIA API Key of your deployment |
Select Load to continue.
Enter the host name of the App Service in API_Endpoint without a protocol and without a trailing slash. A value such as https://app-aia-1234567890.azurewebsites.net/ makes the report fail to load.
The client that opens the report connects to the dab AI Analyst App Service and to your database directly. Both have to be reachable from that client.
- App Service: the public IP address of the client must be on the allowlist. You define the allowlist during the deployment under Networking Security, described in the Deployment Guide. You can change it later in the Azure Portal under App Service -> Networking -> Access restrictions. If you deployed with
Add IP Addresses to Allowlistset toNo, the client instead needs a custom connection into the virtual network, such as network peering or a VPN. - Database: the database must accept connections from the public IP address of the client..
The database settings described in After the Deployment only open the path from AI Analyst to your database. The client that opens the report needs its own rule.
2. Sign In to the Database
2.1 Enter the Database Credentials
Power BI asks for the database credentials the first time the report loads.
- Select the Database tab.
- Enter the value after
User ID=from the connection string as the User name. - Enter the value after
Password=from the connection string as the Password. - Select Connect.
The connection is now established.
Select the Windows tab instead of Database. Power BI then connects with your current Windows credentials. If you need to connect as a different Windows user, select Use another account on the same tab and enter the domain\username and password of that account.
2.2 Reset the Credentials - if no sign-in window appears
Power BI reuses credentials that are already stored for the same server. If the sign-in window does not appear, or if the stored credentials are wrong, reset them:
- Open File -> Options and settings -> Data source settings.
- Select the SQL server of your deployment.
- Select Edit Permissions.
- Enter the credentials again and establish the connection.
3. Verify the Result
The report is provisioned when the data loads without an error and the visuals show your data.
If the load fails with a connection error, your database may not accept traffic from your client, or the entered host name may be incorrect.