Forum Discussion

Daveed1973's avatar
Daveed1973
Icon for Advocate II rankAdvocate II
5 years ago
Solved

Best practice for giving 3rd Party access to data

We have a 3rd party customer who have their own Power BI subscription. As we provide a service to this 3rd party they would like to be able run and create their own KPI reports in Power BI but would ...
Need Help
  • Anonymous's avatar
    Anonymous
    5 years ago

    Hi Daveed1973 ,

     

    I think you might want to distribute Power BI content to external guest users with Azure AD B2B.

     

    There're two ways to invite guest users: Planned invites and Ad hoc invites.

     

    When using the allow external guest users to edit and manage content in the organization feature, the specified guest users get additional access to your organization's Power BI.

     

     

    Best Regards,

    Stephen Tao

     

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Daveed1973's avatar
Daveed1973
Icon for Advocate II rankAdvocate II
5 years ago

Did some research on this yesterday and from what I can see using Azure AD B2B external collaboration may the best option here.

 

I can set up a Power BI app with all the relevant content and share this with the external 3rd party. This gives them the ability to consume the reports and dashboards within the app but not to create their own content.

 

To allow them to create their own content you have to enable the "Share content with external users" feature in BI Admin portal. By also allowing the "Allow external guest users to edit and manage content in the organization" feature from within the BI portal and sharing the Power BI workspace with them, they can also create their own content from the datasets they have access to within the workspace.

 

From what I can see so far, they DO NOT get access to any of the data outside of the dataset that comes from our own database, only the dataset we give them access to.

 

In this case I created a new workspace and a new set of database views and reports on top of these views specifically for this guest and added only these views to the dataset. What they can see by giving them edit rights is the database name and the sever name but not any of the credentials for connecting to this. If they wanted to access to additional data outside of the dataset within the BI reports then this is something we would have to add for them. 

 

It's still early days and I am still testing this but it seems it may solve the problem.