Forum Discussion
Org vs. Workspace Apps - permissions & embedding
- 15 days ago
Hi pghMR,
There are two separate behaviours here, and I think it helps to distinguish Org Apps from the existing workspace/classic Power BI apps.
For classic/workspace apps, Microsoft still supports adding Entire organization to an app audience.
Microsoft documents that here: Publish a workspace app in Power BI.
That option can be unavailable in a few cases, for example:
- automatic installation is enabled for the app
- you are a guest user
- your Power BI/Fabric admin has disabled organization-wide app sharing in tenant settings
So if you need true “everyone in the organization” distribution today, a workspace app still supports that pattern.Org Apps use a different access model.
Microsoft’s current Org Apps guidance focuses on granting users/groups access through audiences and sharing the Org App or individual audience items. I do not currently see the same documented Entire organization audience option there.
See: Get started with Org Apps.
For SharePoint, I would not try to embed the complete app experience.
Microsoft’s supported pattern is to embed the individual Power BI report using the Power BI web part in SharePoint Online.
See: Power BI integration with other services.
The report still respects Power BI permissions and RLS, so users only see data they are authorized to see.
So for your rollout, I would currently think about it like this:
Workspace app → best fit if you need Entire organization distribution today Org App → newer app experience with audience-based distribution, but different sharing/embedding capabilities SharePoint → embed individual reports rather than the whole app shellIf your users already use SharePoint as the main navigation portal, one practical approach is to keep the Org App for Power BI consumption but embed the important individual reports into SharePoint where needed.
AI-assisted drafting: AI was used to help structure and phrase this response. I reviewed and validated the technical content before posting.
Hi pghMR,
There are two separate behaviours here, and I think it helps to distinguish Org Apps from the existing workspace/classic Power BI apps.
For classic/workspace apps, Microsoft still supports adding Entire organization to an app audience.
Microsoft documents that here: Publish a workspace app in Power BI.
That option can be unavailable in a few cases, for example:
- automatic installation is enabled for the app
- you are a guest user
- your Power BI/Fabric admin has disabled organization-wide app sharing in tenant settings
So if you need true “everyone in the organization” distribution today, a workspace app still supports that pattern.
Org Apps use a different access model.
Microsoft’s current Org Apps guidance focuses on granting users/groups access through audiences and sharing the Org App or individual audience items. I do not currently see the same documented Entire organization audience option there.
See: Get started with Org Apps.
For SharePoint, I would not try to embed the complete app experience.
Microsoft’s supported pattern is to embed the individual Power BI report using the Power BI web part in SharePoint Online.
See: Power BI integration with other services.
The report still respects Power BI permissions and RLS, so users only see data they are authorized to see.
So for your rollout, I would currently think about it like this:
Workspace app
→ best fit if you need Entire organization distribution today
Org App
→ newer app experience with audience-based distribution, but different sharing/embedding capabilities
SharePoint
→ embed individual reports rather than the whole app shellIf your users already use SharePoint as the main navigation portal, one practical approach is to keep the Org App for Power BI consumption but embed the important individual reports into SharePoint where needed.
AI-assisted drafting: AI was used to help structure and phrase this response. I reviewed and validated the technical content before posting.