Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
6 years ago
Solved

Problem when sharing reports using URL that resides in external users workspaces

Hi all

We are facing an issue when sharing reports.

Let me introduce my environment....

We have some external users woking on my Powerbi Tennant.

 

Pepe has developed a Billing Report. It resides in her own workspace inside my tenant company....

Pepe want to share Billing Report with Jose and me.

Note: For security and privacy reasons, we disabled direct sharing so we "share the URL" (copy url and send by email, chat, etc)

 

So the first time Jose and me we want to see the report, clic on the link and we have to request access...

 

  • Request Access: Let's get you access (and an OK button)
  • Submit a Request with space for a message (an a Send Request button)

An email is sent to the report owner to give approval....

The problem is, when Pepe clic the "Grant access" button, Pepe is redirected to it's "OWN" workspace in it's OWN company Powerbi tenant, not the workspace in mycompany.com !!!!!!!!!!!!!!! 😠😠😠😠😠

So of course, Pepe got an error

Yes, of course, the report is not there!!! the report is in Pepe's workspace at mycompany.com

I think this is clearly an not well designed feature, for some reason, grant access link does not recognize in wich workspace the report is.

So, are there any configuration i'm missing?

Can Pepe share reports in other way without revealing entire Active Directory's addresses?

 

Regards.

 

 

 

 

 

7 Replies

  • Hi there

    What happens if you do this in an App Workspace and not in "My Workspace"?

    I would suggest always using App Workspaces.
  • v-xuding-msft's avatar
    v-xuding-msft
    Community Support

    Hi Anonymous ,

     

    For your situation, I think you share your company tenant url to Pepe and she create workspace and report in that website. And she give the share link of report to you and Jose. Then she click the "Grant access" button in email to grant you both. Then encounter the issue. Right?

     

    If so, you need to take a note of a few points:

    • First of all, Power BI will be signed in using her own default account. She have to open that tenant url to grant access. 
    • Secondly, she need to add users into access list. Even though have shared the report link to you, she still need to add into the list after clicking "Grant access" buttons in email.
     
     

    https://docs.microsoft.com/en-us/power-bi/collaborate-share/service-request-access

    • Anonymous's avatar
      Anonymous
      Not applicable

      Hi v-xuding-msft 

      Yes, you right described the issue.
      My comments in red below

       


      v-xuding-msft wrote:

      If so, you need to take a note of a few points:

      • First of all, Power BI will be signed in using her own default account. She have to open that tenant url to grant access. 
        Yes, but the acceptance URL that comes in the email button could be a bit "smart" and identify itself if the report resides in my home tennant or in an external tennant where I'm guest. I think it is a flaw in design or maybe this use case is not so usual but it will have to be considered in the future.
      •  Secondly, she need to add users into access list. Even though have shared the report link to you, she still need to add into the list after clicking "Grant access" buttons in email.
        Even that the URL in the email acceptance button doesn't work as expected, we found that you still can give access from this tab...

        but when I clic on check button we got an error....

        This error is related to the configuration in AD showed here because when enable this, sharing is possible.

       

      We had to restrict that option because we don't want external users to see the entire list of users in the share box

      So, all the issue comes down to one problem: How can an external user share a report without revealing to him all the list of users of the active directory?

      IE: I want to Pepe share to Jose but not to Juan. Even more, Pepe or José don't even have to know that Juan exists.

      Is that possible?

       

      Regards