Granular Tenant Settings in Power BI
Access Power BI Tenant Settings
The tenant settings are part of the Power BI admin portal. To get to the Power BI admin portal:
· Select the settings gear in the top right of the Power BI service.
· Select Admin portal.
· Select Tenant settings
We’ve re-designed the Power BI Tenant settings page to make it easier to find the different settings and make it easier to manage the different settings.
To access the Power BI admin portal, your account needs to be marked as a Global Admin within Office 365 or Azure Active Directory, or have been assigned the Power BI service administrator role. For more information about the Power BI service administrator role, see
Granular Tenant Settings
Let’s start by changing the tenant setting for sharing content to external users.
In the above image, you can see that all users in the organization can share dashboards to external users.
In case we wanted to prevent all users from sharing Power BI content externally, we’d simply disable it.
Instead, let’s say that we have a security group called Power BI Authors and we only want members of this security group to be able to share outside the tenant.
To do that we would switch the setting to enabled and change the Apply to part to Specific security groups. Then we would set Power BI Authors as the security group that can share externally.
Once you hit Apply, only users who are in the Power BI Authors group will be allowed to share externally.
Other users in the tenant will get a message that they can’t share content outside to external users!
Let’s take it one more step further now.
What if you wanted all users in the Power BI Authors security group to be able to share externally, except the users in the Finance department.
To do that, you would check the Except specific security groups option. Then enter the corresponding security group for the Finance department.
Now all members of Power BI Authors except members who belong to Finance Department can share content externally.
That was easy, right?
With these different options, you have the flexibility to control exactly which users can use the different features in Power BI.
At this time, the following tenant settings can now be managed at a granular level:
- Share content to external users
- Export reports as PowerPoint presentations
- Print dashboards and reports
- Publish content packs to the entire organization
- Create template organizational content packs
- Use Analyze in Excel with on-premises datasets
We plan to make other controls like Publish to web will be made granular as well in the coming months.
We would love to know what you think about this new capability. Try out the granular tenant settings today and let us know what you think in the comments below.
Also, in case you missed recent announcements about administration in Power BI, here’s a short recap:
- Recently, we released the Power BI service administrator role. Previously only global tenant administrators could manage Power BI. The new role allows for Power BI specific administration. Read more about it here.
- The Power BI auditing preview is available to all regions except sovereign clouds. Read about that announcement here.