Issue with external sharing of power bi reports

[JF_Tote]

We've been having issues with external partners accessing reports we share. The process for adding external partners is through creating a guest account for the external partners email via 365 admin, adding them to a security group via 365 admin and then our BI team adding this security group to different parts of said report so that this is shared with the external partner.

Cannot load model

Couldn't load the model schema associated with this report. Make sure you have a connection to the server, and try again.

Underlying ErrorPowerBI service client received error HTTP response. HttpStatus: 400. PowerBIErrorCode: QueryUserError
QueryUserErrorA connection could not be made to the data source with the Name of '{"protocol":"analysis-services","address":{"server":"powerbi://api.powerbi.com/v1.0/myorg/Performance%20Marketing","database":"Affiliate Partner Reporting"},"authentication":null,"query":null}'.
Correlation ID159467b1-0528-2bf8-e311-030509cf94c3
Activity IDfe84e244-b2f4-435b-8c0e-7cdf1b2ff95f
Request IDf9de7163-9216-353d-78c9-8a232e61ca37
TimeWed Oct 09 2024 14:58:03 GMT+0100 (British Summer Time)
Service version13.0.24436.44
Client version2410.1.21281-train
Cluster URIhttps://wabi-uk-south-redirect.analysis.windows.net/

Also getting the following error:

Error fetching data for this visual

A connection could not be made to the data source with the Name of '{"protocol":"analysis-services","address":{"server":"powerbi://api.powerbi.com/v1.0/myorg/Performance%20Marketing","database":"Affiliate Partner Reporting"},"authentication":null,"query":null}'.

Activity ID: fe84e244-b2f4-435b-8c0e-7cdf1b2ff95f
Request ID: 82fe0e9e-509d-4b2f-9e8d-7635d9d28185
Correlation ID: 31c1d0cc-8b76-d956-5644-723b9a79a805
Time: Wed Oct 09 2024 15:26:57 GMT+0100 (British Summer Time)
Service version: 13.0.24436.44
Client version: 2410.1.21281-train

[JF_Tote]

I have check other posts here regarding external sharing, just to be aware the licenses these guest accounts have are the following:

Power BI Premium Per User

Not sure on the following "dashboards with Pro content shared from Group Workspaces" as would need to be raised within our BI team.

[Anonymous]

Hi  @JF_Tote ,

Content saved in Pro workspaces can be shared with users who have a Pro license. However, PPU users can also access Pro workspace content, but they won't be able to use any PPU-specific features in that workspace.

Please ensure that the security group permissions are correctly set up and that the external partners have the necessary access, and the external partners are correctly added to the security group.
This security group must has the appropriate permissions to access the report.
Also,users might be assigned conflicting roles that restrict access,you may review the roles assigned to the 

external partners and ensure there are no conflicts.

Best regards.
Community Support Team_Caitlyn

[JF_Tote]

Hi @Anonymous , 

Our BI team have investigated the following:

The workspaces accessed by external partners are all in premium workspaces. There is no RLS on the report that could cause any conflicts and the security groups have read access permissions to the underlying data sources. One user in the security group can see the report with no issues whilst another has the error message so I don't think this would be caused by a permissions issue.

[JF_Tote]

We just recently tested creating a guest account with an Azure Tenant of an external partner.

In our Azure AD the users Identities read as 'ExternalAzureAD', we tested giving this guest account a PowerBI Premier Per User license, adding them to security group that is then added into the reports and letting them login into PowerBI to be able to see if they can view the data.

This worked.

With the Guest account having an Identities of 'ExternalAzureAD' they were able to view the data of the reports we were sharing to them. It is noted that multiple guest accounts who are having errors in viewing the reports have Identities of mail, multiple or MicrosoftAccount.

It is also noted that personal accounts (e.g. gmail) that are non business accounts (not linked to a Azure tenant) also cannot access the reports or view data.

We are starting to think Microsoft has changed something around the ability to view data/sharing reports via Guests with those that do not have or authenticate via their own company Azure AD.

We just wanted to check with yourselves if this is the case, and if Microsoft have made any recent changes regarding the above?