DMC (Dr Migrate Collector)

Create Service Principal

Dr Migrate requires a Service Principal to communicate with Azure Migrate and Power BI.

Service Principal Creation Guidelines:

• SPN Name: It is recommended to name the App Registration “drmigrate-spn”
• Client Secret Creation: Dr Migrate requires a client secret with 12-month expiry recommended

For Microsoft documentation on creating a Service Principal in Entra ID, see here.

Create a Security Group for the Service Principal

Create a security group to house the Service Principal and assign Power BI permissions:

• Group Name: It is recommended to name the Security Group “drmigrate-powerbi”
• Group Membership: The Service Principal should be added as a member of the security group

To learn more about how to assign access to Entra ID Security Groups, see here.

Configure SPN Access

Assign your Service Principal the following permissions:

Approve Required Resource Providers

Dr Migrate requires specific Azure resource providers to be registered and approved in your subscription. These providers enable Dr Migrate to create and manage Azure Migrate resources within the managed application resource group.

Required Resource Providers:

• Microsoft.OffAzure - Required for Azure Migrate discovery and assessment capabilities
• Microsoft.Migrate - Required for Azure Migrate project management

To approve resource providers:

1. Sign in to Azure Portal with a subscription owner account
2. Navigate to Subscriptions and select the subscription where Dr Migrate will be deployed
3. Open the Subscription > Resource Provider tab and find the required resource providers
4. Search for and select each required provider:
   • Microsoft.OffAzure
   • Microsoft.Migrate
5. Click Register for each provider
6. Verify registration status shows as “Registered”

Enable Cost Management Policy for EA Pricing

Assign Cost Management Reader Role

Assign the Cost Management Reader role to your Service Principal:

Enable Account Owners Can View Charges Policy

Complete these additional steps to enable EA pricing access:

1. Sign in to Azure Portal with an Enterprise Administrator account
2. Navigate to Cost Management + Billing
3. Select your Billing Account
4. Under Settings, choose Policies
5. Set “Account owners can view charges” to On

Learn more about how to assign RBAC roles here.

Audit Azure Policy

When Dr Migrate installs, it deploys Azure resources to a managed Resource Group. These resources may be subject to Azure policy.

To mitigate deployment failures, temporarily exempt policies at the Subscription level that have the following effects:

• Append
• DeployIfNotExists
• Deny
• Modify

To learn how to exempt Azure Policy from resources, see here.

Configure settings in the Power BI tenant

Head to Power BI Admin Portal to configure access to the Power BI settings for the Security Group containing the Service Principal.

From the left-hand side menu select Tenant Settings. You will be presented with a list of options that need to be configured.

Most of these settings need to be enabled. You can either have this at the organizational level or specify the Dr Migrate Security Group.

Configure the following settings:

Workspace settings -> Create workspaces (new workspace experience)

Developer settings -> Service principals can create workspaces, connections, and deployment pipelines

Developer settings -> Embed content in apps

Developer settings -> Service principals to use Fabric APIs

Export and sharing settings -> Export to Excel

Export and sharing settings -> Export to .csv

Export and sharing settings -> Export reports as PowerPoint presentations or PDF documents

Power BI visuals -> Add and use certified visuals only. This setting needs to be configured to the Disabled state.

Power BI visuals -> Allow visuals created using the Power BI SDK.

Required Visuals Instaltion

The Network Navigator visual is required for advanced dependency mapping functionality within this report. To ensure full feature availability for all users, it must be installed into the Organizational Visuals section of Power BI.

1. Download the .pbiviz file from the Network Navigator GitHub repository.

2. As a Fabric Admin, access the Power BI Admin Portal.

3. Navigate to Organizational Visuals.

4. Select Add a custom visual, then choose Upload from file.

5. Browse to the downloaded .pbiviz file and upload it.

6. Once uploaded, the visual will be available for all users in your organization via the Organizational Visuals pane in Power BI.

Gateway Administration

Dr Migrate uses an On-Premises data gateway as part of the solution.

Within the Power BI Admin Center, navigate to “On-Premises data gateways” in the central panel.

Enable the Tenant Administration Settings using the switch on the right-hand side.

Enabling this will show the “Manage Gateway Installers” option.

Alternative Approach: If you prefer not to add the SPN to Gateway Administrators, you can temporarily disable the gateway installation restriction:

Ensure that the “Restrict users in your organization from installing gateways” setting is set to Off.