Skip to main content

Granting Consent to Pulse365 and Understanding Delegated Permissions

Pulse365 requires consent from a Microsoft 365 Global Administrator or Application Administrator to operate correctly. This consent can be granted via a shareable link, allowing the Admin to approve access without needing to initiate the scan themselves.

BindTuning Team avatar
Written by BindTuning Team
Updated over 2 months ago

What happens when a user clicks “Scan” after consent has been given by a Administrator?

Once the Admin has granted consent - via a shared link or in-app request permission, any user can initiate a scan by clicking the Scan button. At this point, they will be prompted to log in with a Microsoft account. This does not need to be the Admin account - any valid Microsoft account can be used.

However, it’s important to understand that this account will be used to validate two operations that rely on delegated permissions:

  • Power BI

  • Engage

These operations depend on the permissions of the signed-in user, not the Admin.


Power BI Requirements

To retrieve data from Power BI during the scan, the signed-in user must have the following permission:

  • Role: Power Platform Administrator or Power BI Administrator

If the user does not have this permission, they must manually perform the following steps before running the scan:

  1. In the Power BI Admin portal, go to Tenant settings.

  2. Scroll to Admin API settings.

  3. Expand Service principals can access read-only admin APIs.

    • Set toggle to Enabled.

    • Select Apply to: Specific security groups.

    • Enter the name of the BindTuning PowerBI group .

    • Click Apply.

  4. Expand Enhance admin APIs responses with detailed metadata.

    • Set toggle to Enabled.

    • Select Apply to: Specific security groups.

    • Enter the name of the same BindTuning PowerBI group .

    • Click Apply.

Note: It may take up to 15 minutes for these changes to propagate. Once complete, rerun your tenant scan in Pulse365 to confirm Power BI data is being collected.


Engage Requirements

For Engage, certain data fields - such as activity date - will return empty values unless the user has the necessary permission:

  • Role: Engage Administrator (aka Yammer Administrator)

Without this permission, the scan will complete, but some Engage-related data will be incomplete or missing.


Summary

  • Consent to Pulse365 must be granted by a Global Admin or Application Administrator via a shareable link or request consent in-app.

  • Any Microsoft account can be used to run the scan, but delegated permissions affect data access.

  • Users must have specific permissions for Power BI and Engage to ensure complete scan results.

Did this answer your question?