Skip to content

Who this article is for

Microsoft Entra administrators who were asked to approve BI Pixie for somebody in their organization. It assumes no BI Pixie account and no prior use of the product.

Approve BI Pixie in Your Organization

Use this page when somebody in your organization asked you to approve BI Pixie, or when Microsoft showed them Need admin approval or Approval required instead of letting them sign in. It explains what BI Pixie asks for and the choices your organization's policy gives you.

What BI Pixie is#

BI Pixie measures how people use your Power BI reports and helps you prepare your semantic models for AI. People use BI Pixie in two ways: in BI Pixie Cloud, a web portal, or inside Microsoft Fabric as the BI Pixie workload.

Before you start#

To approve an application for everyone in your organization, you need one of these Microsoft Entra roles:

  • Privileged Role Administrator, for any permission.
  • Cloud Application Administrator, Application Administrator or AI Administrator, for any permission except Microsoft Graph application permissions. BI Pixie asks for no application permissions.
  • A custom role that includes the permission to grant consent to applications.

To approve BI Pixie for named people through Microsoft Graph or PowerShell, you need Privileged Role Administrator, Cloud Application Administrator or Application Administrator.

Who publishes BI Pixie#

BI Pixie is published by DataChant Consulting LLC, a verified publisher in Microsoft Entra ID. Microsoft shows a blue verified badge beside the publisher name on its approval screens.

What BI Pixie asks for#

Every permission BI Pixie asks for is delegated. BI Pixie acts only on behalf of the person who is signed in, and reaches only what that person can already reach.

Whether a permission needs an administrator depends on your organization's policy, not on BI Pixie. Where your organization does not let people approve applications for themselves, every permission needs an administrator. Where your organization lets people approve applications from verified publishers for selected permissions, people can approve only the permissions your organization classified as low impact, and the rest need an administrator.

BI Pixie asks for a small set of permissions the first time a person signs in to BI Pixie Cloud or first opens the BI Pixie workload. It asks for the others only when somebody first uses a feature that needs them. The two permissions pages list every permission, when BI Pixie asks for it and why:

How a request reaches you#

Where your organization turned on Microsoft's admin consent workflow, a person who cannot approve BI Pixie can send a request from Microsoft's own screen. The request appears in the Microsoft Entra admin center under Enterprise apps > Activity > Admin consent requests > My Pending.

  • Microsoft sends the request to the reviewers your organization named, who review it under My Pending.
  • A reviewer can view every pending request, but can approve or deny only the requests made after they were named.
  • Requests are grouped by application. Select BI Pixie or BI Pixie Workload in the list to see who asked and the reason they gave.
  • A request expires after the number of days your organization set.
  • Microsoft emails the person who asked only when email notifications to reviewers are turned on.

Where the workflow is off, the person sees Need admin approval with no way to send a request, and usually contacts you directly.

Approve BI Pixie#

You have three choices. Choose the one your organization's policy calls for.

For everyone in your organization

You can approve BI Pixie in the Microsoft Entra admin center once BI Pixie is listed among your organization's enterprise applications. If BI Pixie is not listed yet, you can use the approval link below.

  1. Sign in to the Microsoft Entra admin center.
  2. Go to Entra ID > Enterprise apps > All applications, and select BI Pixie or BI Pixie Workload.
  3. Select Security > Permissions, and then select Grant admin consent.
  4. Review the permissions on Microsoft's screen, and select Accept.

You can also use an approval link. Replace {organization} with your own tenant's verified domain, such as contoso.com, or with your tenant ID.

  • To approve BI Pixie, the application for BI Pixie Cloud:
    https://login.microsoftonline.com/{organization}/adminconsent?client_id=114a7e20-3796-4ddd-ab99-568a78b7759b
  • To approve BI Pixie Workload, the application for the BI Pixie workload in Microsoft Fabric:
    https://login.microsoftonline.com/{organization}/adminconsent?client_id=3e3c4859-980e-46a0-a3db-047ffb6f05c9

The link opens Microsoft's own approval screen. That screen lists the permissions BI Pixie asks for and asks you to accept them for everyone in your organization. Nothing is approved until you accept.

When you approve BI Pixie for everyone, Microsoft may remove permissions that an earlier approval for everyone granted and that this approval does not include. Microsoft leaves in place the approvals that people gave for themselves.

For named people

You can approve BI Pixie for one person at a time through Microsoft Graph or PowerShell. See Grant consent on behalf of a single user.

Or, as Microsoft documents for approving an application for some people and not everyone:

  1. In the BI Pixie or BI Pixie Workload enterprise application, select Properties, set Assignment required? to Yes, and select Save.
  2. Select Users and groups > Add user/group, and assign the people or groups who may use BI Pixie.
  3. Approve BI Pixie for your organization, as described under For everyone in your organization.

Only the people and groups you assigned can then sign in. Assigning a group needs Microsoft Entra ID P1 or P2.

Let people approve BI Pixie for themselves

Change your organization's user consent setting under Enterprise apps > Consent and permissions > User consent settings. For example, choose Allow user consent for apps from verified publishers, for selected permissions, and classify the permissions you allow as low impact. The change applies only to future approvals. See Configure how users consent to applications.

Give a person access#

Where your organization requires that people be assigned to BI Pixie, approving BI Pixie is not enough on its own. Microsoft refuses the sign-in of anybody who is not assigned.

  1. In the Microsoft Entra admin center, go to Enterprise apps > All applications, and select BI Pixie or BI Pixie Workload.
  2. Select Users and groups > Add user/group.
  3. Select the person, or a group they belong to, and then select Assign.

Assigning a group needs Microsoft Entra ID P1 or P2. To assign people, you need Cloud Application Administrator, Application Administrator or User Administrator, or to be an owner of the enterprise application.

What happens next#

Tell the person who asked that BI Pixie is approved. They sign in to BI Pixie Cloud or open the BI Pixie item again, and Microsoft no longer asks them to approve the permissions you accepted. If they later use a feature that needs a further permission, Microsoft may ask for approval again.

Undo an approval#

  • An approval for everyone. In the BI Pixie or BI Pixie Workload enterprise application, select Security > Permissions, open the Admin consent tab, select the ellipsis (...) beside the permission, and then select Revoke permission.
  • An approval a person gave for themselves. You cannot revoke it on the User consent tab of the Microsoft Entra admin center. Remove it through Microsoft Graph or PowerShell. Where your organization lets people approve applications for themselves, the person can also remove it from the My Apps portal at myapps.microsoft.com.

Access tokens already issued stay valid until they expire, and Microsoft issues no new ones for the removed permissions. Removing an approval does not stop people from approving BI Pixie again, where your policy allows it.

Considerations#

  • When you deny a request, the person can ask again. When you block a request, Microsoft stops future requests for BI Pixie.
  • A request you do not review expires after the time your organization set.
  • When you require assignment, nobody can approve BI Pixie for themselves. An administrator approves BI Pixie, and only the people and groups assigned to it can use it.

Related content#