Forum Discussion

Pablo82's avatar
Pablo82
Regular Visitor
7 months ago
Solved

Fabric Capacity App external access

I'm currently using an F2 Fabric Capacity and made a Dashboard with an underlying semantic model and SQL dataset. I've created the app and it works fine, but when I try and invite a guest account through Entra ID B2B Guest account I can't see the data in the visuals.

I've added the account as audience in the app, given read access to the underlying dataset and semantic model and can even open the database and see the data directly. What am I still missing for me to resolve this 'Missing_references' error?

  • Hey Pablo82  , the first thing to understand is that  a visual can render only if the user has access to every item in the chain (report > semantic model/dataset > data source/SQL endpoint). If any referenced item is missing, the visuals won't work for the user, in your case, guest user . 

     

    There's also other Tenant level configurations needed ...  in particular, make sure to enable: 

     

    #1. Guest users can access Microsoft Fabric
    #2. Guest users can browse and access Fabric content

     

     

    To access tenant settings, you need Fabric Admin permissions, If you dont' have this RBAC role, please check my article How to grant Fabric Admin permission?  

     

    in addition, I would doble check the permission chain for the visuals, I know you already 1) Added the guest to the App audience, 2) gave Read access to the semantic model and the SQL dataset and 3) the guest can even open the database and see data directly.

     

    But how about this as posibilites ... 

    • Report points to a semantic model in another workspace? (e.g. Shared semantic model) 

    • Dashboard tiles pinning across workspaces?  

    • Build permission — do they need it? 

    • DirectQuery to Fabric Lakehouse/Warehouse (SQL endpoint). If your report uses DirectQuery to a Lakehouse/Warehouse SQL endpoint, the guest typically needs access to that SQL analytics endpoint (or the underlying item) in addition to model/report permissions 

      Just a few additional posibilities for you to rule out and narrow the issue 😁🤞  ... please check some of this information and get back! Hopefully any of these will solve your issue. 

       

      If you find this information useful, please share a thubs up and if this solve your issue mark as a solution. Best of lucks 

7 Replies

  • Hey Pablo82  , the first thing to understand is that  a visual can render only if the user has access to every item in the chain (report > semantic model/dataset > data source/SQL endpoint). If any referenced item is missing, the visuals won't work for the user, in your case, guest user . 

     

    There's also other Tenant level configurations needed ...  in particular, make sure to enable: 

     

    #1. Guest users can access Microsoft Fabric
    #2. Guest users can browse and access Fabric content

     

     

    To access tenant settings, you need Fabric Admin permissions, If you dont' have this RBAC role, please check my article How to grant Fabric Admin permission?  

     

    in addition, I would doble check the permission chain for the visuals, I know you already 1) Added the guest to the App audience, 2) gave Read access to the semantic model and the SQL dataset and 3) the guest can even open the database and see data directly.

     

    But how about this as posibilites ... 

    • Report points to a semantic model in another workspace? (e.g. Shared semantic model) 

    • Dashboard tiles pinning across workspaces?  

    • Build permission — do they need it? 

    • DirectQuery to Fabric Lakehouse/Warehouse (SQL endpoint). If your report uses DirectQuery to a Lakehouse/Warehouse SQL endpoint, the guest typically needs access to that SQL analytics endpoint (or the underlying item) in addition to model/report permissions 

      Just a few additional posibilities for you to rule out and narrow the issue 😁🤞  ... please check some of this information and get back! Hopefully any of these will solve your issue. 

       

      If you find this information useful, please share a thubs up and if this solve your issue mark as a solution. Best of lucks 

    • Pablo82's avatar
      Pablo82
      Regular Visitor

      The second option in the tenant settings was indeed not enabled, but did not fix the issue in my case.
      I have removed all but one dataset from the semantic model of which I know the guest user can access.

      I have also given the user build permission and the dataset is in a SQL database, not a warehouse or lakehouse,but has read and readData permissions on this dataset.

      Just so that I'm not missing anything, does the guest user require a type of license in order to see visuals made within an F2 capacity? It currently has the 60-day free Power BI trial.