Forum Discussion

pghMR's avatar
pghMR
New Member
5 hours ago

Org vs. Workspace Apps - permissions & embedding

We are preparing to rollout Power BI to our organization and are determine whether we should guide users to Organizational vs. Workspace apps. By all accounts, org apps seem the way to go but I'm running in to 2 issues: 

  1. Org apps do not allow users "share with the entire organization" as an option - is this a setting i am missing somewhere? 
  2. Org apps cannot be embedded in sharepoint. I have tried every type of link, code, etc. but only workspace apps will embed. 

is there any way to overcome these two issues with org apps?

Need Help
power bi
Tips and Tricks

3 Replies

  • ibarrau's avatar
    ibarrau
    Icon for Super User rankSuper User
    4 hours ago

    Hi. I don't think embedding apps is a feature available for any of those. I mean, there no feature to do it with neither of them. If you copy a link of a power bi app and iframe it on sharepoint site, it's manual tweak and not real supported feature like embedding a report inside sharepoint that will generate specifically a link for that.

    About sharing with entire organization, you can handle that creating a security group at Entra ID with all the users. Then share the org app with that group.

    Consider OrgApps are the future. They can handle CICD and probably new features in time.

    I hope that helps,

     

  • jubinsoni's avatar
    jubinsoni
    Icon for Continued Contributor rankContinued Contributor
    3 hours ago

    Hi pghMR​,

    Both of those look like current limitations of org apps rather than a setting you are missing (they are still evolving, so worth re-checking the docs' limitations list before rollout). Two practical workarounds so you can still pick org apps:

    1. "Entire organization" -> an all-employees group. Create a dynamic Entra ID group that always contains every active employee, and use it as the audience. Membership updates automatically for joiners and leavers:

    Entra ID > Groups > New group
  Group type: Security
  Membership type: Dynamic User
  Rule:
    (user.accountEnabled -eq true) -and (user.userType -eq "Member")

    (Dynamic groups need Entra ID P1. If you don't have it, many orgs already have an "All staff" group maintained by HR/IT that you can reuse.)

    2. SharePoint -> embed the reports, link to the app. Rather than embedding the app, embed the key report pages with the Power BI web part (or "Embed report > SharePoint Online" link) and add a "Open full app" button that links to the org app. Permissions still flow from the app audience / workspace access, so users only see what they are allowed to.

    SharePoint page
  -> Power BI web part: Report A (page "Overview")
  -> Power BI web part: Report B (page "Summary")
  -> Button: "Open the full Sales app" -> org app link

    So my overall approach would be:

    Org app as the main distribution channel
-> Audience = dynamic "all employees" group
-> SharePoint = embedded report pages + link to the app
-> Re-check org app limitations as they reach GA

    AI-assisted drafting: AI was used to help structure and phrase this response. I reviewed and validated the technical content before posting.

  • GilbertQ's avatar
    GilbertQ
    Icon for Super User rankSuper User
    1 hour ago

    Hi pghMR​ 

    From my perspective, using the new Org Apps is the way to go because more features are being put into this as well as it is shown with the CICD, which means that they're investing in this capability. And as others have mentioned, you should just be able to embed the URL into Sharepoint.