0

I am able to connect to Azure Analysis Service using my credentials in PowerShell. Can someone tell me how to connect using App Registration. I already added the App Registration as Analysis Services Admins in PowerShell (app:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx@xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx).

enter image description here

#Using My Credentials
$ServerFullName = "asazure://azureregion.asazure.windows.net/mytestanalysisservice"
$Server = New-Object Microsoft.AnalysisServices.Server
$Server.Connect($ServerFullName)
$Server.Roles.ExternalMembers
$Database = $Server.Databases.Item("adventureworks")

# Using Azure App Registration
$SubscriptionID = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
$TenantID = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
$ApplicationID = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
$PlainPassword = "ClientSecretValue"
$SecuredPassword = ConvertTo-SecureString $PlainPassword -AsPlainText -Force
$Credential = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $ApplicationID, $SecuredPassword
Connect-AzAccount -ServicePrincipal -SubscriptionId $SubscriptionID -TenantId $TenantID -Credential $Credential -ErrorAction SilentlyContinue -WarningAction SilentlyContinue
$azContext = Get-AzContext

#Generate Token
$azProfile = [Microsoft.Azure.Commands.Common.Authentication.Abstractions.AzureRmProfileProvider]::Instance.Profile
$profileClient = New-Object -TypeName Microsoft.Azure.Commands.ResourceManager.Common.RMProfileClient -ArgumentList ($azProfile)
$token = $profileClient.AcquireAccessToken($azContext.Subscription.TenantId)

#Connect to Azure Analysis Service using Token (I need help here)
$ServerFullName = "asazure://azureregion.asazure.windows.net/mytestanalysisservice"
$Server.Connect($ServerFullName)
Vinny
  • 461
  • 1
  • 5
  • 18
  • The connect method parameter is a connection string [$Server.Connect($ServerFullName)] The token goes into the connection string : https://learn.microsoft.com/en-us/azure/automation/shared-resources/credentials?tabs=azure-powershell#create-a-new-credential-asset-with-windows-powershell – jdweng Jun 14 '23 at 09:35
  • @jdweng Can you please type me example command how to associate $Server.Connect with ConnectionString – Vinny Jun 14 '23 at 20:05
  • See answer at following : https://stackoverflow.com/questions/72981862/using-msal-access-token-in-connection-string-for-aas-power-bi-cube – jdweng Jun 14 '23 at 21:09

1 Answers1

0

I was able to connect to Azure Analysis server using App registration Client ID and passwords\ with below ConnectionString. Trick is, not to generate AzToken bearer. Just pass the plainpassword in connectionstring and SSAS (New-Object Microsoft.AnalysisServices.Server) will generate a token and authenticate.

$ConnectionString = "Provider=MSOLAP;Data Source=asazure://westus.asazure.windows.net/myanalysisinstancename;Initial Catalog=adventureworks;User ID=$UserName;Password=$PlainPassword;Persist Security Info=True;Impersonation Level=Impersonate"

$Server = New-Object Microsoft.AnalysisServices.Server

$Server.Connect($ConnectionString)

Vinny
  • 461
  • 1
  • 5
  • 18