> For the complete documentation index, see [llms.txt](https://uidata.gitbook.io/datacentral-knowledge-center/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://uidata.gitbook.io/datacentral-knowledge-center/product-guides/item-management.md). # Item Management Oversee Power BI Items and maintain security for your Tenant * [x] Connect to Power BI Workspaces * [x] Add a Power BI Items to your tenant {% hint style="info" %} **Important:** your personal 'My Workspace' can not be added to your tenant {% endhint %} * **Accessible Workspaces:** Gain visibility into workspaces accessible through your Azure AD account in the Power BI Service or those accessible via your configured [Power BI Service Principal](/datacentral-knowledge-center/deployments/power-bi-service-principal.md). * **Role Assignment for Access Control:** Assign roles to reports to manage and control access levels, determining which roles have access to specific reports, see [Role Management](/datacentral-knowledge-center/product-guides/user-and-role-management.md#creating-roles) for more details. *** ### Workspaces and your tenant The accessibility of workspaces within your tenant is contingent upon the Tenant configurations, which dictate whether workspaces are embedded using your Azure AD account or a Power BI Service Principal. To ensure correct functionality, both the Azure AD account and the Service Principal must hold a minimum 'Member' role within their respective workspaces in Power BI. To add a workspace to your tenant, navigate to '*Administration -> Power BI Items*' and click on '*Manage Workspaces*'.

To add a report from a workspace, click '*Add New Item*,' then select your workspace and the report you wish to embed.

Once workspaces and reports have been added, your users can embed reports if:

**Azure AD embedding:** * Azure AD users need to be at least '*Viewer*' within corresponding workspace in Power BI Service (same for external Azure AD users) * Through Service Principal as fallback options if they don't have access to corresponding workspace. **Power BI Service Principal embedding:** * As fallback option when

Azure AD lacks access to the specific workspace *

User Pass and

Mobile ID users require the Service Principal to embed reports {% hint style="info" %} If workspace is on a dedicated capacity ![](https://1952150759-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FfEoiVXBZDmtsCCNsaMab%2Fuploads%2F9PyR0FK0dl8O7Twk7vOP%2Fpowerbi_dedicatedcapacity.svg?alt=media\&token=a96bda9b-954b-4de0-8ed9-e0011b404a94) * Azure AD users can embed without Power BI Pro License and not receive a banner * Service Principal can embed for User Pass and Mobile ID users and not receive a banner {% endhint %} Diagram showing workspaces with and without capacity, and how reports are embedded into a tenant depending on the user type:

*** ### Additional Data When embedding a report in DataCentral, you will need to click on '*Additional Data*' depending on the reports data model. Here are two possible scenarios. 1. The Power BI report is embedding a Paginated Report (.rdl) within it as a visual. Then, include the GUID for the Paginated Report in the '*Additional Data*' section, and type is '*Report*'.

Paginated Report within a Power BI Report

Additional Data for embedding Paginated Report

2. The paginated report (.rdl) has dependencies on a semantic model that has Row-Level Security. Then, the GUID for the semantic model must be included in the '*Additional Data'*, type is '*dataset'*, and '*Has RLS'* option checked.

Paginated Report on a RLS semantic model

*** ### Pin Tenant Home Page To set a default report on your tenant's home page, either click '*Go to reports*' on the Home page or navigate to '*Administration -> Power BI Reports*'. If permitted, your users can subsequently pin their own home page.

Locate the report intended for embedding on the tenant's home page and click on it.

Ensure that your AAD users have access or that your Service Principal has access to the workspace where the report is embedded from.

If permitted, your users can overwrite the default home page by pinning a report of their choice.