Forum Discussion
Security Aspect while sharing Pro Workspace report with external guest users (Entra B2B)
Hi All,
I have a pro shared workspace and I need to share report across tenant with external gues users through Microsoft Entra B2B.
What are the security aspect we need to consider with respect to Vnet, IP Restriction, Firewalls, Private Network etc?
How do we need to implement this specifically for Power BI?
What needs to be setup on Power BI Tenant Portal and what needs to be configured in the Azure Portal?
Appreciate your input and help in this.
Thanks,
Pallavi
Hello pallavi_r
Power BI Tenant Portal Setup
• Enable “Invite external users” in Admin Portal and restrict to approved security groups.https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-azure-ad-b2b
• Disable “Publish to Web” to prevent public exposure.
• Assign external users to Viewer/Contributor roles in workspacesAzure Portal Configurations
• Enable Entra B2B collaboration and invite guests via Azure AD.
• Create Conditional Access Policies enforcing MFA, IP restrictions, or trusted devices.https://azureops.org/articles/power-bi-access-to-external-users
• Limit guest permissions with “Guest users permissions are limited” in Azure AD.
• Assign the Guest Inviter role to control invitation privileges.
• Use security groups to manage guest access to Power BI workspaces.
• Configure Azure Private Link/VNet for secure on-premises data access
4 Replies
Hello pallavi_r
Power BI Tenant Portal Setup
• Enable “Invite external users” in Admin Portal and restrict to approved security groups.https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-azure-ad-b2b
• Disable “Publish to Web” to prevent public exposure.
• Assign external users to Viewer/Contributor roles in workspacesAzure Portal Configurations
• Enable Entra B2B collaboration and invite guests via Azure AD.
• Create Conditional Access Policies enforcing MFA, IP restrictions, or trusted devices.https://azureops.org/articles/power-bi-access-to-external-users
• Limit guest permissions with “Guest users permissions are limited” in Azure AD.
• Assign the Guest Inviter role to control invitation privileges.
• Use security groups to manage guest access to Power BI workspaces.
• Configure Azure Private Link/VNet for secure on-premises data accessHi pallavi_r , Thank you for reaching out to the Microsoft Community Forum.
Please let us know if your issue is solved. If it is, consider marking the answer that helped 'Accept as Solution', so others with similar queries can find it easily. If not, please share the details.
Thank you.Thanks nilendraFabric for your prompt response.
Hi @pallavi_r , Thank you for reaching out to the Microsoft Community Forum.
Please let us know if your issue is solved. If it is, consider marking the answer that helped 'Accept as Solution', so others with similar queries can find it easily. If not, please share the details.
Thank you.Hi @pallavi_r , Thank you for reaching out to the Microsoft Community Forum.
Please let us know if your issue is solved. If it is, consider marking the answer that helped 'Accept as Solution', so others with similar queries can find it easily. If not, please share the details.
Thank you.
