Power Bi private endpoint with NVA

[rt-7199]

I am hoping this is right place to ask this question and I am only minimally versed with power BI as this is not something I manage or consume but have to provide support and gudance as a network engineer.

Our Power BI/Fabric instance is configured using private endpoint. Now there is a requirement that we give access to guest users externally. We have also deployed 3rd party NVAs (Network Virtual Appliances) and we are thinking to give acces through them by setting NAT and public address on them to power BI metrics data. 

We had to setup Private DNS and conditional forwwarding for access from on-prem. I am not sure if this can be replicated as easily as any simple webserver setup behind a firewall with NAT for access to give our external guest users.

[Anonymous · Accepted solution]

Hi, @rt-7199 

You can invite your external users in Azure, and then manage what your external users can edit and manage in your organization in the Power BI admin portal:

Azure AD B2B Guest users can now edit and manage content in Power BI to collaborate better across or...

Here's the documentation for Power BI B2B configuration and how to manage permissions:

Distribute content to external guest users with Microsoft Entra B2B - Power BI | Microsoft Learn

You need to grant permissions to external users in Power BI service/Fabric:

Share B2B semantic models with external guest users (preview) - Power BI | Microsoft Learn

Semantic model connectivity and management with the XMLA endpoint in Power BI - Power BI | Microsoft...

When you set up a dedicated Power BI/Fabric endpoint, you can refer to the following documentation to implement your access strategy:

Private endpoints for secure access to Power BI for on-premises clients - Power BI | Microsoft Learn

About private Links for secure access to Fabric - Microsoft Fabric | Microsoft Learn

Best Regards

Jianpeng Li

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.