Find everything you need to get certified on Fabric—skills challenges, live sessions, exam prep, role guidance, and more. Get started
We've been sharing reports with users outsize our organization for 5 months without any issues. These users do have a PBI Pro license, and have had no issues accessing the report.
The issue is, any new user that we share the report with is unable to access the report. These users are in the same organizaiton as the users who are currently accessing the same report. I've verified with the other organization that these new users do have a Power BI Pro license. These users are getting the email when I share the report with them. I can see that these users are attempting to access the report as 'Access' field in the shared report settings turns from 'Cancel Invite' to 'Read'.
However, these users keep getting the following message:
This is where I'm stumped. The report hasn't been deleted as other users from the same company are accessing this report and as far as the access to the report I have verified that they do indeed have access to the report. Only new users are unable to access the report while users who already had the report shared with them are still able to access the report.
It makes absoutly no sense. I'd be happier if all of the users couldn't access the report, at least then you'd have something to work with.
Thoughts? Ideas?
Solved! Go to Solution.
@nickyvv & @V-lianl-msft, we finally figured it out. You both pointed us in a direction that helped us identify the issue.
The key take away was that a guest account is created when an invite is sent from Power BI. I tested this by sending invites to my hotmail and gmail accounts and sure enough as soon as the invite was sent you would see a guest account created in Azure AD.
However, for the users in question no guest account was being created. Without getting into all the details, these users used to work at our company but now work for a new company. Their AD accounts are still active and their AD accounts have been updated with their new email address. So when the invite was sent to the user in quesiton with their new email address, that email address resolved to our internal Azure AD account and as such didn't create a new guest account.
So in order To Resolve The Issue we had to prevent these AD accounts from syncing with Azure AD. Once we did that and the sync was completed we were able to send these users an invite and everything worked as expected.
Again, thanks for the input as it utilimtally pointed us in the right direction.
So I had my network guys look into what both of you suggested it looks like when I share a report with an external user the guest account is not being created within Azure AD.
I was told that our current setting for Collaboration restritions in azure ad are "Allow Invitations to be sent to any domain (most inclusive)"
However, it looks like those gues accounts aren't being created. Which would explain why users that I have shared the report with in the past are able to view the report (As they do have a guest account) but new users are unable to view the report (as no account is being created).
So i guess my question would be, is this a power bi issue or a azure ad issue. Somewhere in this process there is a breakdown where an account is not being created. Do we have a disconnect between Power BI and Azure AD in that the account can't be created or is it possilbe we have an azure ad issue that is preventing the accounts from being created?
Thoughts?
That sounds kinda strange. So you are using the ad hoc invitation method but are running into issues.
To be sure:
- you have (or the person inviting the guests has) a pro license?
- you are sending the invitation from the share report button in the workspace? Because ad hoc invites from the workspace access list are not supported
- the guest users do receive the invite, but can't access the report?
- have a look at the other Considerations and Limitations if any of them do apply to your case
Please let us know if the above options apply to you.
Did this help you or did I answer your question?
Then please give kudos or mark my post as a solution!
My blog: nickyvv.com
Twitter: @NickyvV
@nickyvv & @V-lianl-msft, we finally figured it out. You both pointed us in a direction that helped us identify the issue.
The key take away was that a guest account is created when an invite is sent from Power BI. I tested this by sending invites to my hotmail and gmail accounts and sure enough as soon as the invite was sent you would see a guest account created in Azure AD.
However, for the users in question no guest account was being created. Without getting into all the details, these users used to work at our company but now work for a new company. Their AD accounts are still active and their AD accounts have been updated with their new email address. So when the invite was sent to the user in quesiton with their new email address, that email address resolved to our internal Azure AD account and as such didn't create a new guest account.
So in order To Resolve The Issue we had to prevent these AD accounts from syncing with Azure AD. Once we did that and the sync was completed we were able to send these users an invite and everything worked as expected.
Again, thanks for the input as it utilimtally pointed us in the right direction.
To share reports with users outside your organization they have to be guest users in your Azure AD.
Are the new users you want to share the report with also already guest users in AAD?
You can check that in the Azure portal., have a look at Distribute Power BI content to external guest users with Azure AD B2B for more info.
Did this help you or did I answer your question?
Then please give kudos or mark my post as a solution!
My blog: nickyvv.com
Twitter: @NickyvV
Check out the September 2024 Power BI update to learn about new features.
Learn from experts, get hands-on experience, and win awesome prizes.