Premium Workspace Permissions for Separate Tenant/Guest Users

[sunlookpbi]

I have a question re: Power BI that, as I write it, is perhaps a bit more complex than I first realized.

What do we have?

• Power BI Pro for all internal users/developers
  • Via E5 licenses
  • Tenant “ABC”

• Power BI Premium
  • One Capacity, at present

• Separate B2B tenant for partners
  • Tenant “XYZ”
  • Separate tenant was desirable for managing a large number of guest users
  • AD Premium P2 licenses

What do we need to do?

• Create a workspace for each of our partners
  • In the Premium Capacity
  • Not using RLS at this time
  • [DONE]

• Assign access to each of these workspaces to a specific group in the XYZ tenant
  • If it’s possible, how is this best accomplished?

[v-kkf-msft]

Hi @sunlookpbi ,

Refer to this document Distribute Power BI content to external guest users , and this can be achieved by creating security groups in Tenant “ABC”. Please explain in detail what problems you encountered when using this method?

If the problem is still not resolved, please provide detailed error information or the expected result you expect. Let me know immediately, looking forward to your reply.

Best Regards,
Winniz

[GilbertQ]

Hi @sunlookpbi 

From my understanding this can be done by using the AD Security Groups and making sure that the other tenant users are guest users in the main tenant.

You can then use the AD Security Group to assign the permissions where required?

[sunlookpbi]

GilbertQ,
Thank you, but that's the problem.
We created the second tenant so that we could manage the 1,000+ guest users outside of our primary tenant. Adding them as guests in both would defeat that purpose.

[GilbertQ · Accepted solution]

Hi @sunlookpbi 

Understood.

Well I am not sure of any other way to do it. The users would need to be part of the same organization as far as I can see.

[sunlookpbi]

This is correct. There is no way to do what we wanted. The external end users will need to be made guests in our primary tenant in order to be provided access to PBI reports.