I am creating a power bi report with multiple tables sources from web and salesforce. when I publish the report and set schedule refresh, I was asked to update data source credentials. I have updated credentials for web data sources. but when i update credentials for salesforce, its giving me an error
I am able to validate the same credentials in power bi desktop and it works without any issue. but only on power bi service, I am getting this error. Not sure what could be the issue here. please help.
Go to Salesforce, find the connecting user and at the bottom there should be login history. Do you see any errors there? Maybe "Restricted IP" (ask your SF admin to check this user's profile & allowed login IP ranges), maybe "Security token required" (ask sf admin, there's something you need to append at the end of password)...
If your app uses "connected app" (set of OAuth2 keys) there might be some config in SF needed like "all users can self authorise" or add your server to list of allowed callback urls...
Related
I created a dashboard in Power BI and would like to share the work with my friends through my novypro profile. But in novypro, it asked me for the embedded url. As I am currently using my school mail id for all my Power BI works, I couldn't see the publish to web option in order to get the embedded URL.
In the other links I tried, I learned that I have to check with the tenant option under Admin Portal. But under Admin Portal I couldn't see anything like that and I have attached the image below.
Is there any other way to send our report to the external users?
The reason you can't see any other tenant settings in the Admin portal is that you are not an Admin. You need to ask an admin to allow you to publish to the web.
The Power BI admin portal has settings that control who can publish to
the web. Work with your organization's Power BI administrator to
change the Publish to web tenant settings in the admin portal.
For smaller organizations or individuals who signed up for Power BI,
you may not have a Power BI administrator yet. Follow our process for
admin takeover. Once you have a Power BI administrator, they can
enable creating embed codes for you.
Established organizations usually already have a Power BI
administrator. People in any of the following roles can act as a Power
BI administrator:
Global administrators Users with the Power BI service admin role in
Azure Active Directory You need to find one of these people in your
organization and ask them to update the Publish to web tenant settings
in the admin portal.
https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-publish-to-web#find-your-power-bi-administrator
Alternatively you can sign up for your own Developer Tenant, which includes E5 so you can use Power BI there and have full control.
I am trying to add a user by email in the power bi app RLS. For this, I have created a Role and then publish the report online. Now I want to add the user. But I am unable to do it. Below is the screenshot
It clearly says the "One or more email addresses are outside your organization: gmail.com".
I have checked the admin portal the Invite to the external user is enabled.
I don't know what is the main reason, but I am stuck to it.
Any help would be highly appreciated.
I want to know the difference in the following 2 options in Power BI Service -> File -> Embed Report:
Website or Portal
Publish to Web (public)
My observation was that you can use Report Filters in Website or Portal option but Report Filters are disabled in Publish to Web option.
Can someone please answer my following queries:
When should we use each of the 2 options?
Which option needs Power BI Embedded Tokens and Capacity to use in production environment?
Can users use Filtering on the report in both the 2 options?
Thanks!
Gagan
Please find the answer below:
1.Difference between Publish to Web and Publish to Website
Publish to Web:
Report will be public
No need to Login (Anyone with the link can view the report)
With the Power BI Publish to web option :
a. You can easily embed interactive Power BI content in blog posts, websites, emails, or social media.
b. You can also easily edit, update, refresh or stop sharing your published visuals.
Publish to Website:
Report will be private
Need to Login first (Unauthorized personal can’t be able to view the report)
With the Power BI Publish to website option :
a. User who has access to that workspace can see the report.
b. User who is member of your organization can see report from that workspace.
2.You don't need the Tokens and Capacity to publish the reports to web or website.
3.Filtering with Publish to Website and Publish to Web
With Publish to Website you can use filtering.
With Publish to Web to use the filtering on the report, you need to have the Power BI Pro License.
Publish to web does not allow display of the filter pane and tabs - at least as for now according to the Microsoft - see this link and the section called "Considerations and Limitations": https://learn.microsoft.com/en-us/power-bi/create-reports/power-bi-report-filter. So if you have filters in the filter pane you would have to move them over to the main content of the report - not ideal if users are already used to using filters on the filter pane.
Publish to website or portal will just give you an iframe with a private URL and when users load the web page they will have to authenticate.
In order to embed and authenticate on behalf of all the users you will need a token. One way to do this is using principal service account - this way you won't be supplying any user account credentials. This workflow is well documented and you can even download a test application with working code where you would need to supply your values such as workspace id, report id, tenant id, application id and finally application secret. Get started with token authentication using this link: https://learn.microsoft.com/en-us/power-bi/developer/embedded/embed-tokens. Double check token expire date and set it appropriately.
I have my own Power BI Pro account from my company powerbi#mycompany.com.
My client has given me access to his tenant as an external guest user with one of it's Power BI Pro licenses.
The question is: how do I access the Power BI Service of my client? When I connect to the service I can't find any possible way to switch then tenant from one to another with the same account (like you can on the Azure portal).
If you are a guest in some host's tenant (domain) then you need their CTID to log in to that host instance. The CTID is the tenant identifier of the host's Azure Active Directory. They can look this up for you in the Azure Portal or use the shortcut below to get it from their PowerBI service. If the host can't find their CTID for some reason you can look it up here: Tenant ID Lookup by Domain. Once you have the tenant id (CTID), simply provide it to the url PowerBI CTID Url :
https://app.powerbi.com/home?ctid=<host's tenant id (ctid)>
and then this will sign you in to their (the Host's) PowerBI.
Click the ? and go to About PowerBI to bring up the window shown below.
For PowerBI Desktop, you need to sign out and then sign back in again. When signing in, click the Sign in Options where you can then elect to sign in to an organization. Provide the Host's domain name and continue the sign in process. Now you will be signed in to PowerBI Desktop and PowerBI service - ready to build, publish and view reports in your Host's organization.
I hope that all makes sense! :)
This is all explained here: https://learn.microsoft.com/en-us/power-bi/guidance/whitepaper-azure-b2b-power-bi#enabling-external-users-to-edit-and-manage-content-within-power-bi
Including the url you need to use to access your customer’s tenant. And you don’t need your customer to assign a pro license if you have one in your home tenant.
It would be even better if you could switch tenants without the URL. Someone posted that idea on Power BI's site and you can upvote it.
https://ideas.powerbi.com/ideas/idea/?ideaid=eb9194f1-ceea-41a7-9761-76e913c58ed5
Just found out that you can actually redirect someone directly to the App that you are creating in the workspace. This can be quite handy if you want to redirect someone directly to the report app instead of the home page.
Go to "update App"
Then go to the permissions Tab
Copy and PAste the link from the app
The link to the app contains the tenant ID
Hope that works! :)
There are many similar questions asked in Stack Overflow but so far as I'm aware, none provide the information that solves this issue.
Goal
Anyone in my organization (but not outside of it) must be able to view a Power BI report. Not all users in my organization have Power BI Pro accounts, so sharing the report in SharePoint is not an option, as I understand it.
Background
In past years I embedded a Power BI report in an Azure web app using a Power BI workspace collection and secured it with Azure Active Directory. This worked fine. Recently Microsoft retired Power BI workspace collections. I need to find another way to embed the report in an Azure web app.
Failed attempts
I tried using Microsoft's onboarding/migration tool but it was too confusing. (I am not a professional developer.) Sample Power BI and Azure code provided by Microsoft on GitHub are also confusing to me.
An Angular solution on Medium successfully walked me through the steps to accomplish my goal, but placed the responsibility of creating a solution that can fetch access tokens on the reader, a skill I don't have.
A Visual Studio solution in GitHub embeds a report in an Azure web app if the following are provided:
"AzureAd": {
"Instance": "https://login.microsoftonline.com/common",
"ClientId": "redacted",
"ClientSecret": "redacted",
"CallbackPath": "/signin-oidc",
"Resource": "https://analysis.windows.net/powerbi/api",
"EmbedUrlBase": "https://app.powerbi.com/*"
Status
I collected the ClientId from Azure > Azure Active Directory > Application ID.
I collected the ClientSecret from Azure > Azure Active Directory > Keys > added key called "secret", saved, and copied the value.
Reply URLs I've tried (based on suggestions on the web) include:
https://website.azurewebsites.net/signin-oidc
https://app.powerbi.com/embedsetup/SignInRedirect (which I believe was added when I attempted to use the onboarding/migration tool)
http://localhost/* (http://localhost:44341/* works when built locally)
In addition, I have a Report ID, Workspace ID, Group ID from the onboarding/migration tool.
Problem
I continue to encounter the AADSTS50011: The reply url specified in the request does not match the reply urls configured for the application error. (No reply URL is specified in the error message.)
Question
How do I successfully provide a reply URL and callback path? An answer that would be helpful would direct me how to find exactly what to type in.
I can provide additional information if needed. Thank you for any advice.
You have no value specified for the Reply URL in your config. This needs to be there as well. In your App Registration and in your config you need to list the same URL as your Reply URL. This is where you want the user to be directed after he or she has signed in. Try listing your main homepage URL (https://hccanalytics.azurewebsites.net/) in both.
See my blog post and video to see if this helps.