Exam DP-600 topic 1 question 120 discussion

Adding a managed identity to App1 will allow it to authenticate and access resources securely without needing to manage credentials explicitly. This is the first step in configuring the app to use a service account for accessing the model via the XMLA endpoint.

https://learn.microsoft.com/en-us/power-bi/enterprise/service-premium-connect-tools For Premium workspaces, the application can use either a service account or app identity on behalf of end users without requiring each user to sign in to Power BI.

To configure App1 to use a service account to access the model, you should add a managed identity to App1. Managed identities provide an automatically managed identity in Azure Active Directory for applications to use when connecting to resources that support Azure AD authentication, such as the Power BI XMLA endpoint So, the correct answer is D. Add a managed identity to App1.

A. Add a managed identity to the workspace. Incorrect. Managed identities are associated with Azure resources (e.g., App Services), not directly with Power BI workspaces. B. Modify the XMLA Endpoint setting. Incorrect. While XMLA endpoints are required, modifying their settings alone won't enable service account access for App1. C. Upgrade the workspace to Premium capacity. Correct. To use a service account (managed identity or service principal), the workspace must be in Premium capacity. PPU does not support service principal authentication. D. Add a managed identity to App1. Incorrect. While adding a managed identity is necessary for App1, this step comes after ensuring the workspace supports service principal authentication, which requires Premium capacity.

Answer seems correct!