Issue - share PBI App with non pro users using PowerBI premium and Direct query with SSO

[barrasa8]

We have the following Scenario:

      --Report is using Direct query with SSO  OAuth2 

      --Role Level Security is implemented in SQL Azure -- Security policies

      --Create a workspace distribute App and publish it , sharing the App with NON Pro account users

      --workspace is set up to members can only view content

      --Using PowerBI Premium

Expected result:

      --Users will open the App and be able to see the report

      --Report data will be filtered for that specific user (through SQL Azure security policy implementation)

Actual result:

      --Pro user and Non pro users could open the App, but report queries had a 401 Error (authenticaiton error)

      --Only when workspace is configured as "Members can edit content", Pro users could see the data in the report correctly, but Non pro users were no longer able           to access the report in the App.

Conclusion: 

       --Seems like App sharing with direct query and SSO enable does not work for NON pro users

       --Seems like even Pro Users can only use reports in Apps if the workspace is set to "Members can edit  content"

Does anyone know if this is something that the PowerBI still has to implement to support Non-Pro users to use SSO direct queries in PowerBI apps? Or am I missing something that I need to do in order to get it to work?

Thanks!! 

[v-yulgu-msft]

Hi @barrasa8,

1. Based on my test, Pro users with read-only permission can view App content.
2. End users need Power BI Pro licenses to consume these apps. But if the app content resides in Power BI Premium capacitcy, end users can access the content without requiring a Power BI Pro license. Reference: Distribute to large audiences with Power BI apps

Best regards,

Yuliana Gu

[barrasa8]

Hi Yuliana, 

Thanks for your answer. But have you tried in your test using Direct Query with SSO(single sign on) ? We could not get it to work.

[barrasa8]

We have the following Scenario:

      --Report is using Direct query with SSO  OAuth2 

      --Role Level Security is implemented in SQL Azure -- Security policies

      --Create a workspace distribute App and publish it , sharing the App with NON Pro account users

      --workspace is set up to members can only view content

      --Using PowerBI Premium

Expected result:

      --Users will open the App and be able to see the report

      --Report data will be filtered for that specific user (through SQL Azure security policy implementation)

Actual result:

      --Pro user and Non pro users could open the App, but report queries had a 401 Error (authenticaiton error)

      --Only when workspace is configured as "Members can edit content", Pro users could see the data in the report correctly, but Non pro users were no longer able           to access the report in the App.

Conclusion: 

       --Seems like App sharing with direct query and SSO enable does not work for NON pro users

       --Seems like even Pro Users can only use reports in Apps if the workspace is set to "Members can edit  content"

Does anyone know if this is something that the PowerBI still has to implement to support Non-Pro users to use SSO direct queries in PowerBI apps? Or am I missing something that I need to do in order to get it to work?

Thanks!!