Forum Discussion
Fabric Capacity App external access
I'm currently using an F2 Fabric Capacity and made a Dashboard with an underlying semantic model and SQL dataset. I've created the app and it works fine, but when I try and invite a guest account through Entra ID B2B Guest account I can't see the data in the visuals.
I've added the account as audience in the app, given read access to the underlying dataset and semantic model and can even open the database and see the data directly. What am I still missing for me to resolve this 'Missing_references' error?
Hey Pablo82 , the first thing to understand is that a visual can render only if the user has access to every item in the chain (report > semantic model/dataset > data source/SQL endpoint). If any referenced item is missing, the visuals won't work for the user, in your case, guest user .
There's also other Tenant level configurations needed ... in particular, make sure to enable:
#1. Guest users can access Microsoft Fabric #2. Guest users can browse and access Fabric content To access tenant settings, you need Fabric Admin permissions, If you dont' have this RBAC role, please check my article How to grant Fabric Admin permission?
in addition, I would doble check the permission chain for the visuals, I know you already 1) Added the guest to the App audience, 2) gave Read access to the semantic model and the SQL dataset and 3) the guest can even open the database and see data directly.
But how about this as posibilites ...
-
Report points to a semantic model in another workspace? (e.g. Shared semantic model)
-
Dashboard tiles pinning across workspaces?
-
Build permission — do they need it?
-
DirectQuery to Fabric Lakehouse/Warehouse (SQL endpoint). If your report uses DirectQuery to a Lakehouse/Warehouse SQL endpoint, the guest typically needs access to that SQL analytics endpoint (or the underlying item) in addition to model/report permissions
Just a few additional posibilities for you to rule out and narrow the issue 😁🤞 ... please check some of this information and get back! Hopefully any of these will solve your issue.
If you find this information useful, please share a thubs up and if this solve your issue mark as a solution. Best of lucks
-
7 Replies
- svenchio
Super User
Hey Pablo82 , the first thing to understand is that a visual can render only if the user has access to every item in the chain (report > semantic model/dataset > data source/SQL endpoint). If any referenced item is missing, the visuals won't work for the user, in your case, guest user .
There's also other Tenant level configurations needed ... in particular, make sure to enable:
#1. Guest users can access Microsoft Fabric #2. Guest users can browse and access Fabric content To access tenant settings, you need Fabric Admin permissions, If you dont' have this RBAC role, please check my article How to grant Fabric Admin permission?
in addition, I would doble check the permission chain for the visuals, I know you already 1) Added the guest to the App audience, 2) gave Read access to the semantic model and the SQL dataset and 3) the guest can even open the database and see data directly.
But how about this as posibilites ...
-
Report points to a semantic model in another workspace? (e.g. Shared semantic model)
-
Dashboard tiles pinning across workspaces?
-
Build permission — do they need it?
-
DirectQuery to Fabric Lakehouse/Warehouse (SQL endpoint). If your report uses DirectQuery to a Lakehouse/Warehouse SQL endpoint, the guest typically needs access to that SQL analytics endpoint (or the underlying item) in addition to model/report permissions
Just a few additional posibilities for you to rule out and narrow the issue 😁🤞 ... please check some of this information and get back! Hopefully any of these will solve your issue.
If you find this information useful, please share a thubs up and if this solve your issue mark as a solution. Best of lucks
- Pablo82Regular Visitor
The second option in the tenant settings was indeed not enabled, but did not fix the issue in my case.
I have removed all but one dataset from the semantic model of which I know the guest user can access.I have also given the user build permission and the dataset is in a SQL database, not a warehouse or lakehouse,but has read and readData permissions on this dataset.
Just so that I'm not missing anything, does the guest user require a type of license in order to see visuals made within an F2 capacity? It currently has the 60-day free Power BI trial.
- deborshi_nag
Super User
Since you have a F2 capacity I believe the guest user will need a Pro license to view Power BI dashboard or reports.
To view Power BI content with a Microsoft Fabric free per user license, your capacity must reside on an F64 or larger SKU, and you need to have a viewer role on the workspace.
Microsoft doc reference
Understand Microsoft Fabric Licenses - Microsoft Fabric | Microsoft Learn
-