Security Group type for "Allow External guest users to edit and manage content" ?

[Anonymous]

Hi All,

I am tyring to enable "Allow External guest users to edit and manage content"  setting for external guest users in our tenant.

By design we can only add security group in this setting. 

powerbi-admin-tenant-settings-b2b-guest-edit-manage.png

I tried using 2 types of groups - 

1. Security group created in Azure Active Directory
   • I can add guest users to group.
   • But I can not add this group in above admin portal setting. I get error for AADGraphApiGetEntityException. 
   • My guess is AADGraphApiGetEntityException is due to no email address available for this group.
2. Security group created in Windows Server  AD
   • I can not add guest users to group. so it still defeats the purpose. 
   • But this group can be easily added to above setting in Power BI. 

If anyone has been successfully enabled "Allow External guest users to edit and manage content"  setting ,

can you please share which type of group to be used for this settings?

Any other changes needed at Azure Active Directory level?

Many thanks,

Nilesh 

[v-danhe-msft]

Hi @Anonymous ,

If you want to  add guest users to group, you could refer to below link that may help you to distribute Power BI content to external guest users 

https://docs.microsoft.com/en-us/power-bi/service-admin-azure-ad-b2b

Regards,

Daniel He

[Anonymous · Accepted solution]

Thank you @v-danhe-msft . 

but documenation does not mention security group type.

We tried different types. In the end , Security Group created in AAD/ O365 worked for us.