Forum Discussion
Advocate IIRequest for Guidance: Sharing Power BI Report with External User
I need some guidance on securely sharing a Power BI report with an external user.
Currently, I have a Power BI report that is connected to a mirrored SQL Server database. I would like to grant access to an external stakeholder, but only to this specific report—without exposing any other reports, datasets, or underlying data beyond what is necessary.
Could you please advise on the best approach to achieve this? Specifically, I’m looking for clarification on:
- The recommended method for sharing a single report externally (e.g., Azure AD B2B, guest access, or other options)
- How to restrict access so the user can only view this report and nothing else in the workspace
- Any licensing requirements or limitations for external sharing
- Best practices for maintaining data security, especially given the SQL Server connection
Please let me know if there are any prerequisites or configurations needed on the tenant or workspace level.
Thanks in advance for your help.
Hi JibinSebastian,
Thankyou for the update.Based on our understanding, since you are still receiving the error message “Unable to grant permissions,” the issue may not be related to Power BI or Fabric. Instead, it could be associated with Microsoft Entra ID or Azure AD user resolution or invitation permissions.
Power BI can grant access only to users who already exist in the Entra directory, or in cases where the inviter has permission to add external users. Therefore, please ensure that the external user is added as a Guest in the Microsoft Entra Admin Center and that the user has accepted the invitation. Next, verify that the External collaboration settings allow guest invitations, and confirm that your account has the Guest Inviter role, with no domain restrictions. Additionally, please check in the Fabric Admin Portal that the following settings are enabled for the entire organization or that you are within the allowed scope.
1. Guest users can access Microsoft Fabric
2. Users can invite guest usersOnce the guest user exists and the applicable policies allow it, sharing via a Power BI App or Org App that contains only the specific report is the best approach to restrict access without exposing workspace content.
If the issue still persists after completing the above steps, it may indicate Entra level restrictions such as cross-tenant limitations or conditional access policies. In that case, please contact your Entra administrator or raise a Microsoft Support ticket for further investigation using the link:Microsoft Fabric Support and Status | Microsoft Fabric
Additionally, please refer to the links below:
Quickstart: Add a guest user and send an invitation - Microsoft Entra External ID | Microsoft Learn
Configure external collaboration - Microsoft Entra External ID | Microsoft Learn
Publish an app in Power BI - Power BI | Microsoft LearnWe hope the information provided helps resolve the issue. Should you have any further queries, please feel free to contact the Microsoft Fabric community.
Thank you.
10 Replies
- KNP
Super User
Because you mentioned mirrored SQL, I'm going to assume you have Fabric.
The easiest way would be to create an Org App (not a Power BI app) with the one report in it.
This should ensure security flows through to the source data without having to set access at each level.
I'm not an expert in Entra but guest/b2b access will be required. I don't recall if sharing via the Power BI service takes care of that, by default.
By sharing only the Org app with one report, they won't get access to any other workspace content.
Licensing will depend on the SKU of Fabric you have. If F64 or higher, the recipient won't need a separate license.
Less than F64 will need a Power BI Pro license to access the content.
If not a Fabric environment, please provide some more detail about the specific setup.
JibinSebastianHi KNP
Thanks for responding.We are using F16 but we provided that external user with PowerBI Pro license.
Could you please elaborate a bit on the Org Apps method
I created an org app and when i tried to provide access to [email protected] it was not allowing me to add that. is there anything else i have to do on that?
- KNP
I suspect a tenant setting preventing the external address.
Check the admin portal...
- JibinSebastian
Still it is throwing me
- KNP
Search for 'guest' in the tenant settings to see if any of those could be a blocker, but if it's not that, it could be security on the Entra side, preventing access.
- JibinSebastian
Guest users access was already enabled. still the same
v-pnaroju-msftCommunity Support
Thankyou, KNP for your response.
Hi JibinSebastian,
We appreciate your inquiry through the Microsoft Fabric Community Forum.
We would like to inquire whether have you got the chance to check the solution provided by KNP to resolve the issue. We hope the information provided helps to clear the query. Should you have any further queries, kindly feel free to contact the Microsoft Fabric community.
Thank you.- JibinSebastian
I followed the steps KNP mentioned but still the issue persists.
- v-pnaroju-msft
Hi JibinSebastian,
Thankyou for the update.Based on our understanding, since you are still receiving the error message “Unable to grant permissions,” the issue may not be related to Power BI or Fabric. Instead, it could be associated with Microsoft Entra ID or Azure AD user resolution or invitation permissions.
Power BI can grant access only to users who already exist in the Entra directory, or in cases where the inviter has permission to add external users. Therefore, please ensure that the external user is added as a Guest in the Microsoft Entra Admin Center and that the user has accepted the invitation. Next, verify that the External collaboration settings allow guest invitations, and confirm that your account has the Guest Inviter role, with no domain restrictions. Additionally, please check in the Fabric Admin Portal that the following settings are enabled for the entire organization or that you are within the allowed scope.
1. Guest users can access Microsoft Fabric
2. Users can invite guest usersOnce the guest user exists and the applicable policies allow it, sharing via a Power BI App or Org App that contains only the specific report is the best approach to restrict access without exposing workspace content.
If the issue still persists after completing the above steps, it may indicate Entra level restrictions such as cross-tenant limitations or conditional access policies. In that case, please contact your Entra administrator or raise a Microsoft Support ticket for further investigation using the link:Microsoft Fabric Support and Status | Microsoft Fabric
Additionally, please refer to the links below:
Quickstart: Add a guest user and send an invitation - Microsoft Entra External ID | Microsoft Learn
Configure external collaboration - Microsoft Entra External ID | Microsoft Learn
Publish an app in Power BI - Power BI | Microsoft LearnWe hope the information provided helps resolve the issue. Should you have any further queries, please feel free to contact the Microsoft Fabric community.
Thank you.
- JibinSebastian
v-pnaroju-msft KNP
Thank you for the time and efforts sending me a response.
I connected with my tenent admin and we created a new user for the external one and i did worked. Appriceate your efforts
