Skip to content

Sovereign Clouds

Choose the Endpoint Set that matches your Microsoft cloud so that MetaMiner signs in and calls the right hosts for a US Government tenant.

How it works

Each Power BI environment in the MetaMiner Administrator has an Endpoint Set. It switches every Microsoft host MetaMiner uses for that environment: sign-in, Power BI REST, Fabric REST, Microsoft Graph, the Power BI web app for Open in Browser, and the token audience.

Endpoint Set Sign-in Power BI REST Fabric REST Microsoft Graph Power BI web app
Commercial (default) login.microsoftonline.com api.powerbi.com api.fabric.microsoft.com graph.microsoft.com app.powerbi.com
US Government login.microsoftonline.com api.powerbigov.us api.fabric.microsoft.us graph.microsoft.us app.powerbigov.us
US Government High login.microsoftonline.us api.high.powerbigov.us api.fabric.high.microsoft.us graph.microsoft.us app.high.powerbigov.us
US Government Military login.microsoftonline.us api.mil.powerbigov.us api.fabric.mil.microsoft.us dod-graph.microsoft.us app.mil.powerbigov.us
Endpoint Set Power BI token audience
Commercial https://analysis.windows.net/powerbi/api
US Government https://analysis.usgovcloudapi.net/powerbi/api
US Government High https://high.analysis.usgovcloudapi.net/powerbi/api
US Government Military https://mil.analysis.usgovcloudapi.net/powerbi/api

The token audience identifies the Power BI API in the access token; MetaMiner does not connect to it.

Before you begin

  • Know which cloud your tenant is in. Your Microsoft account team or Fabric administrator can confirm it.
  • Register the application, permissions, security group and tenant settings in that cloud's portals, exactly as for Commercial. See Microsoft Setup.
  • Allow outbound HTTPS from the MetaMiner server to the hosts in your row. See Network and Microsoft Endpoints.

Steps

  1. In the MetaMiner Administrator, add or edit the Power BI environment.
  2. In Endpoint Set, select your cloud: Commercial, US Government, US Government High or US Government Military.
  3. Enter Tenant ID, Client ID and Client Secret from your cloud's Entra ID.
  4. Click Test Connection, then Apply, and restart the MetaMiner Server.

Image of the Edit Power BI Environment dialog with the Endpoint Set list open showing the four clouds

../images/microsoft-setup/mma-endpoint-set.png

Limitations

Feature Commercial US Government clouds
Scheduled collection, Test Connection, backup Yes Yes
Delegated browser sign-in in the MetaMiner Client (and the features that need it) Yes No. MetaMiner reports interactive sign-in as unavailable.

TODO: state which features have been tested on each US Government cloud

Commercial is the fully exercised path. Confirm with engineering which features (collection, Capacity Metrics, backup and restore, Usage dashboards) have been tested on US Government, High and Military tenants.

TODO: confirm support for other national clouds

MetaMiner offers no Endpoint Set for Microsoft Azure operated by 21Vianet (China) or other national clouds. Confirm whether this is a product decision to state publicly.

Verify

  • Test Connection passes PBI API Token creation and Graph API Token creation with the selected Endpoint Set.
  • Open in Browser in the Power BI Explorer opens your cloud's Power BI web app.

Troubleshooting

PBI API Token creation fails although the IDs and secret are correct

The Endpoint Set does not match the cloud of the tenant. Select the correct Endpoint Set.

Token creation passes but the API steps fail with connection errors

The firewall allows the Commercial hosts but not your cloud's hosts. Open outbound HTTPS to the hosts in your row.

Next steps