PowerBI Dashboard Azure SQL Database (DirectQuery) OAuth Access with Azure AD B2B Users

[Anonymous]

Hi All,

I am having this issue where when using an Azure SQL Database as a data source for a report in the PowerBI service, B2B users get a "400 Unauthorised" message related to an unknown user "NT Authority\Anonymous Logon".

The scenario is that I have an Azure SQL Database hosted in the same tenant as our Power BI, however I would like users from another tenant to be able to access the dashboard using Azure AD B2B Guest Account functionality.

This is what I have configured in the connection (Server Name/Database removed), it works fine for users local to the tenant.

Does this functionality work with Azure AD B2B? Guest users appear to be able to authenticate to the database using SSMS or VS, so PowerBI definitely seems central to the issue. I am guessing that it has something to do with Service Principals/App Registrations but I am struggling to find any documentation in order to get this to work.

Any assistance or knowledge gratefully received.

Many Thanks.

[v-lionel-msft]

Hi @Anonymous ,

Maybe you can refer to the article:

Configure multi-factor authentication for SQL Server Management Studio and Azure AD 

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[Anonymous]

Thanks @v-lionel-msft , but that functionality works in SSMS as things stand.

It is only within PowerBI with a dashboard/report that uses direct query and Oauth Passthrough as a Azure AD guest account that it doesn't work. The accounts in question are using Azure AD B2B, not B2C.