PowerBI Project Meeting: Service Accounts

Meeting Details

Date/Time/Location

Date1/20/2021
Time10 am
Location

Attendees


Meeting Goals and Expected Preparation

Goals

Expected Preparation

Agenda

TimeTopicOwnerNotes and Details
2mWelcome and ArrivalJoseph Chanson
  • Welcome!
20mAction Item ReviewJoseph Chanson
  • Meeting Goals:
    • Discuss Service Accounts for AzureAD and Powerbi Administration
    • Service account MFA exemption options
  • Permissions Current Status
    • AzureAD permissions confirmed (netid)
      • Successfully created AD groups via PowerShell script
      • Successfully assigned AD group members via PowerShell script.
    • PowerBI permissions verification next week.
  • Service Account use cases
    • PowerBI manual admirative overhead reductions
      • AzureAD permissions AD changes
      • Connection string changes
      • Frequent Datagateway software updates 
    • Increased Auditing
      • Automated processes will have additional auditing and logging built into the process.
  • Action Items
    • 3 Powerbi Admin service accounts (1 for ARIT, ETS, SAIT)
      • Current Accounts needing Powerbi admin access
        • arit-datagw-admin
        • sist-datagw-admin
        • ETS account? 
      • use: 
        • Register Datagateway with PowerBI portal (gateway software updates)
        • DataConnection  updates
        • office 365 view audit logs
    • 3 Service  account for AzureAD updates (1 for ARIT, ETS, SAIT)
      • use
        • AzureAD Group creation and membership updates
        • switch staff netid to admin accounts.
FutureJoseph Chanson
  • Future
    • Permission Request process
    • Auditing Requirements
      • Change request auditing required (ie 'Ticket')?
      • Does Azure AD have appropriate audit logs?
      • Does scripts need to log changes?
-Action Items