Frequently asked questions about Power BI Embedded


What is Power BI Embedded?

Microsoft Power BI Embedded (PBIE) allows application developers to embed stunning, fully interactive reports into their applications without having to build their own data visualizations and controls from scratch.

Who is the target audience for Power BI Embedded?

Developers and software companies, also known as independent software vendors (ISVs), coding applications.

How is Power BI Embedded different from Power BI the service?

Power BI is a software-as-a-service analytics solution that gives organizations a single view of their most critical business data.

Microsoft developed Power BI Embedded for ISVs wanting to embed visuals into their applications to help their customers make analytic decisions. This spares ISVs from having to build their own analytics' solution themselves. Embedded analytics enables business users to access business data and execute queries against it to generate insights within the application.

What is the difference between Power BI Premium and Power BI Embedded?

Power BI Premium is capacity geared toward enterprises who want a complete BI solution that provides a single view of its organization, partners, customers, and suppliers. Power BI Premium helps your organization make decisions. Power BI Premium is a SaaS product that allows users to consume content through mobile apps, internally developed apps, or at the Power BI portal.

Power BI Embedded is for ISVs who want to embed visuals into their applications. Power BI Embedded helps your customers make decisions because Power BI Embedded is for application developers, customers of that application can consume content stored on Power BI Embedded capacity, including anyone inside or outside the organization. You can't share Power BI Embedded capacity content through one-click publish to Web or one-click publish to SharePoint.

What is the Microsoft recommendation for when a customer should buy Power BI Premium vs. Power BI Embedded?

Microsoft recommends that enterprises buy Power BI Premium, an enterprise-grade, self-service cloud BI solution. We recommend ISVs buy Power BI Embedded for its cloud-powered embedded analytics components. However, a customer has no restriction on which product to buy.

There may be some cases where an ISV (typically large), in addition to app embedding, wants to use a P SKU to get the additional benefits of the pre-packaged Power BI service within their organization. Some enterprises may decide to use A SKUs in Azure if they're only interested in building line-of-business applications and embedding analytics into them and aren't interested in using the pre-packaged Power BI service.

How many embed tokens can I create?

Embed tokens with Pro or Premium Per User (PPU) license are intended for development testing, so a Power BI master account or service principal can only generate a limited number of tokens. Purchase a capacity for embedding in a production environment. There's no limit to how many embed tokens you can generate when you purchase a capacity. Go to Available Features to check the usage value that indicates the current embedded usage in percentage.

Embedded Gen 2 (Preview)

What is Power BI Embedded Generation 2?

Power BI Embedded recently released a new version, called Embedded Gen2. Embedded Gen2 will simplify the management of embedded capacities, and improve the Power BI Embedded experience. For more information, see Power BI Embedded Generation 2.

How can I autoscale Embedded Gen2?

Embedded Gen 2 does not provide an out-of-the-box vertical autoscale feature. To learn about alternative autoscale options for Embedded Gen2, see Autoscaling in Embedded Gen2

How is Embedded Gen2 resource utilization evaluated?

Power BI Embedded Gen2 evaluates your level of utilization by aggregating utilization records every 30 seconds. Each evaluation is composed of two different aggregations: Interactive utilization and background utilization.

Interactive utilization is evaluated by considering all the interactive operations that completed on or near the current half-minute evaluation cycle.

Background utilization is evaluated by considering all the background operations that completed during the past twenty-four hours, where each background operation contributes only 1/2880 of its total CPU cost (there are 2880 evaluation cycles in each 24-hour period).

A capacity consists of an equal number of frontend and backend v-cores. The CPU time measured in utilization records reflects the backend v-cores utilization, and this utilization drives the need to scale. Utilization of frontend v-cores is not tracked. You cannot convert frontend to backend v-cores.

What happens to traffic during overload?

If you have an A1 capacity with half backend v-cores, each evaluation cycle quota is 15 seconds (0.5*30) of CPU utilization. If the sum of both utilizations exceeds the total backend core quota in your capacity, the capacity enters a temporary interactive request delay mode, during which each interactive request (such as report load, visual interaction, and so on) is delayed before it is sent to the engine for execution. The amount of delay is proportional to the amount of overload detected. Overload of 100% will incur a delay of 20 seconds, while overloads smaller than 10% are allowed.

The capacity stays in interactive request delay mode if the previous evaluation is at greater than 100% resource usage.

Which operations contribute to interactive utilization, and which to background utilization?

The following events are interactive operations:

  • Datasets workload - Report View, Query, XMLA read
  • Dataflows workloads
  • Paginated Report workload - paginated report render

The following are background operations:

  • Datasets workload - scheduled refresh, on-demand refresh, background query (after refresh)
  • Dataflows workload - scheduled dataflow refresh
  • Paginated reports workload - data driven subscriptions renders
  • AI workloads

How can I use my utilization data to predict my capacity needs?

Your metrics report dataset retains 30 to 45 days of data. You can use the report to indicate how close you are to your capacity's maximum resources, and if you save monthly snapshots, you can compare them to indicate trends of growth and extrapolate the rate in which you will arrive at 100% utilization of your resources.

How can my utilization data inform me I should scale?

Utilization data does not currently indicate whether requests were throttled due to capacity being in interactive request delay mode. During the preview period, a property will be added to each utilization record to reflect throttled requests. The information will be added to the utilization app so admins can determine whether users experienced delays, and to what extent the delays are due to overload.

How can I get notified that I'm approaching my max capacity?

There are two options for Embedded Gen2:

  • The Capacity management page in the Power BI admin portal has a utilization notification checkbox. Users can select the threshold at which an alert will be triggered (the default is 80%), and the email address to which utilization alerts should be sent.
  • Configure an Azure Alert using the Gen2 CPU metric.

How much data is Power BI storing? How can I retain more?

The Power BI service stores over 90 days of utilization data. Users who need longer data retention can use Bring Your Own Log Analytics (BYOLA) to store more utilization data, which will be available for Embedded Gen2 customers by the Embedded Gen2 generally available (GA) date.

How do I get visibility into resources of Gen2 beyond CPU time?

Today, customers don't have visibility through utilization data to the memory footprint of their operations, and cannot know ahead of time whether any of their operations are subject to failures. A solution for such visibility is part of the preview feedback process.

How do I use utilization data to perform chargebacks?

On the left side of the utilization report, a bar chart visual displays utilization information between workspaces for the time span of the report. The bar chart visual can be used for chargebacks, providing each workspace represents a different ISV customer, business unit, cost center, or other entity to which chargebacks can apply.


Where can I learn more about capacity and SKUs in Power BI embedded analytics?

What are the prerequisites for creating a PBIE capacity in Azure?

  • Sign in to your organizational directory (Microsoft accounts aren't supported).
  • You need to have a Power BI tenant, that is, at least one user in your directory has signed up for Power BI.
  • You need to have an Azure subscription in your organizational directory.

How can I monitor Power BI Embedded capacity consumption?

Can my capacity scale automatically to adjust to my app consumption?

While there's no automatic scaling now, all the APIs are available to scale at any time.

Why creating/scaling/resuming a capacity results in putting the capacity into a suspended state?

Capacity provisioning (scale/resume/create) may fail. You can use the Get Details API to check a capacity's ProvisioningState: Capacities - Get Details.

Can I only create Power BI Embedded capacities in a specific region?

With the Multi-geo (Preview) feature, you can purchase a Power BI Embedded capacity in a different region than your Power BI home tenant location

Why can't I see a workspace although I have permissions?

When a user is granted permissions to a workspace, app, or artifact, it might not be immediately available through API calls. The result can either be a missing artifact in a 'GET' API response, or an error when trying to use the artifact. The user can resolve this issue by calling refreshUserPermissions API, which updates the user permissions.

How can I find my PBI tenant region?

You can use the PBI portal to find your PBI Tenant region. > ? > About Power BI

About Power BI Tenant region

What does the Cloud Solution Provider (CSP) channel support?

  • You can create PBIE for your tenant with subscription type CSP
  • Partner account can sign in to customer tenant and purchase PBIE for customer tenant, specify customer tenant user as Power BI capacity admin

Why do I get an unsupported account message?

Power BI requires you to sign up with an organizational account. Trying to sign up for Power BI using a Microsoft account isn't supported.

Can I use APIs to create and manage Azure capacities?

Yes, there are PowerShell cmdlets and Azure Resource Manager REST APIs you can use to create and manage PBIE resources.

What is the PBI Embedded capacity role in a PBI Embedded solution?

To promote your solution to production, you need to assign the Power BI content (workspace) your application uses to a Power BI Embedded (A SKU) capacity.

In what Azure regions is PBI Embedded available?

PAM (EcoManager) - see Product availability manager

Available regions (16 - same regions as Power BI)

  • US (6) - East US, East US 2, North Central US, South Central US, West US, West US 2
  • Europe (2) - North Europe, West Europe
  • Asia Pacific (2) - Southeast Asia, East Asia
  • Brazil (1) - Brazil South
  • Japan (1) - Japan East
  • Australia (1) - Australia Southeast
  • India (1) - West India
  • Canada (1) - Canada Central
  • United Kingdom (1) - UK South

What is Power BI Embedded's authentication model?

Power BI Embedded continues to use Azure AD for master user (a designated Power BI Pro or Premium Per User (PPU) licensed user) authentication, or with service principal for authenticating the application inside Power BI.

An ISV can implement their own authentication and authorization for their applications.

You can use your existing directory if you already have an Azure AD tenant. You can also create a new Azure AD tenant for your embedded application content security.

To get an AAD token, you can use one of the Azure Active Directory Authentication Libraries. There are client libraries available for multiple platforms.

My Application already uses AAD for User Authentication. How can we use this Identity when authenticating to Power BI in a "User Owns Data" scenario?

It's standard OAuth on-behalf-of flow (/azure/active-directory/develop/web-api). You need to configure your application to require Power BI service (with the required scopes) permissions. Once you have a user token to your app, you simply call to ADAL API AcquireTokenAsync using the user access token and specify the Power BI resource URL as the resource ID:

var context = new AD.AuthenticationContext(authorityUrl);
var userAssertion = new AD.UserAssertion(userAccessToken);
var clientAssertion = new AD.ClientAssertionCertificate(MyAppId, MyAppCertificate)
var authenticationResult = await context.AcquireTokenAsync(resourceId, clientAssertion, userAssertion);

What object ID is the service principal object ID?

The Object ID from the main screen of a registered app is the object ID for the app.

The object ID found in the Managed application in local directory > Properties section is the service principal object ID you need to use. This object ID is to reference a service principal for operations or to make changes to the service principal object ID. Such as applying a service principal as an admin to a workspace.

How is Power BI Embedded different from other Azure services?

You must have a Power BI account before purchasing Power BI Embedded in Azure. Your Power BI Embedded deployed region determines your Power BI account. Manage your Power BI Embedded resource in Azure to:

  • Scale up/down
  • Add capacity admins
  • Pause/resume service

Use to assign/un-assign workspaces to your Power BI Embedded capacity.

What content pack data types can you embed?

You can't embed Dashboards and tiles built from content pack datasets. However, you can embed reports built from a content pack dataset.

What is the difference between using row-level security (RLS) vs. JavaScript filters?

There's often confusion around when to use RLS versus JavaScript filters, because one method is about controlling what a specific user can see, and the other is about optimizing the user's view.

For RLS, the ISV developer controls the data filtering as part of the model creation and embed token generation. The end user sees only what the ISV allows the user to see. In this case, the user can choose to see less than what's being filtered, but won't be able to bypass the RLS configuration and see more than what's allowed.

For client-side filtering (JavaScript), the ISV might decide what the end user sees at the initial view, but they can't control changes the end user might apply to the view itself. Since user JavaScript client code can trigger data filtering on the backend, it can't be considered secure.

Reference RLS vs JavaScript filters for more details.

How do I manage permissions for service principals with Power BI?

Once you enable service principal to use with Power BI, the application's AD permissions don't take effect anymore. The application's permissions are then managed through the Power BI admin portal.

Service principals inherit the permissions for all Power BI tenant settings from their security group. To restrict permissions, create a dedicated security group for service principals and add it to the Except specific security groups list for the relevant, enabled Power BI settings.

This situation matters when you add the service principal as an admin to the new workspace. You can manage this task through the APIs or with the Power BI service.

When to use an application ID vs. a service principal object ID?

The application ID, also known as client ID, is used to create the access token when passing the application ID for authentication.

To reference a service principal for operations or to make changes you use the service principal object ID — for example, applying a service principal as an admin to a workspace.

Can you manage an On-premises data gateway with service principal?

You can't manage an On-premises data gateway (data gateway) using service principal like you can with a master account.

With a master account, you can install a data gateway, add users to the gateway, connect to data sources, and do other administrative tasks.

With service principal, you can configure row-level security (RLS) using an SQL Server Analysis Services (SSAS) on-premises live connection data source. This way you can manage users and their access to data in SSAS when integrating with Power BI Embedded using a service principal.

Can you sign into the Power BI service with service principal?

No - you can't sign into Power BI using service principal.

Also, you can't consume content as a user in external applications (SaaS embed), only when you generate an embed token.

What are the best practices to improve performance?


How do I purchase Power BI Embedded?

Power BI Embedded is available through Azure.

What happens if I already purchased Power BI Premium and now I want some Power BI Embedded in Azure benefits?

Customers continue to pay for any existing Power BI Premium purchases until the end of their current agreement term and then, at that point, may switch their Power BI Premium purchases as necessary.

Do I still have to buy Power BI Premium to get access to Power BI Embedded?

No, Power BI Embedded includes the Azure-based capacity that you need to deploy and distribute your solution to customers.

What's the purchase commitment for Power BI Embedded?

Customers may change their usage on an hourly basis. There's no monthly or annual commitment for the Power BI Embedded service.

How does the usage of Power BI Embedded show up on my bill?

Power BI Embedded bills on a predictable hourly rate based on the type of node(s) deployed. You are billed as long as your resource is active, even if there's no usage. You need to pause your resource to stop billing.

Who needs a Power BI Pro or Premium Per User (PPU) license for Power BI Embedded and why?

You need a Power BI Pro or Premium Per User (PPU) license or service principal to use REST APIs. To add reports to a Power BI workspace, an analyst needs either a Power BI Pro or Premium Per User (PPU) license or service principal. To manage Power BI tenant and capacity, an admin is required have a Power BI Pro or Premium Per User (PPU) license.

Because Power BI Embedded allows Power BI portal use for managing and validating embedded content, the Power BI Pro or Premium Per User (PPU) license is required to authenticate the app inside to get access to the reports in the right repositories.

However, for creating/editing embedded reports inside your application, the end user does not need a Pro or Premium Per User (PPU) license as the user isn't required to be a Power BI user at all.

Can I get started for free?

Yes, you can use your Azure credits for Power BI Embedded.

Can I get a trial experience for Power BI Embedded in Azure?

Since Power BI Embedded is a part of Azure, it's possible to use the service with the $200 credit received when signing up for Azure.

Is Power BI Embedded available for national clouds (US Government, Germany, China)?

Power BI Embedded is also available for national clouds.

Is Power BI Embedded available for non-profits and educational?

There's no special Azure pricing for non-profit and educational entities.

Power BI Workspace Collection

What is Power BI Workspace Collection?

Power BI Workspace Collection (Power BI Embedded Version 1) is a solution based on the Power BI Workspace Collection Azure resource. This solution allows you to create Power BI Embedded applications for your customers using Power BI content under the Power BI Workspace Collection solution, dedicated APIs, and workspace collection keys to authenticate the application to Power BI.

Is Power BI Workspace Collection on a deprecation path?

Yes, but customers that are already using the Power BI Workspace Collection solution can continue to use it until deprecation. Customers can also create new workspace collections and any Power BI Embedded applications that still use the Power BI Workspace Collection solution.

However, this also means that new features aren't added to any Power BI Workspace Collection solutions. We encourage customers to plan their migration to the new Power BI Embedded solution.

When is Power BI Workspace Collection support discontinued?

Customers that are already using the Power BI Workspace Collections solution can continue to use it until the end of their support agreement.

In what regions can I create a PBI Workspace Collection?

The available regions are Australia Southeast, Brazil South, Canada Central, East US 2, Japan East, North Central US, North Europe, South Central US, Southeast Asia, UK South, West Europe, West India, and West US.

Why should I migrate from PBI Workspace Collection to Power BI Embedded?

There are some Power BI Embedded solution features and capabilities that you can't do with Power BI Workspace Collection.

Some of the features are:

  • All the PBI data sources are supported. Only two Power BI Workspace Collection data sources are supported.
  • Features such as Q&A, refresh, bookmarks, embedding dashboards & tiles, and custom menus are only supported in the Power BI Embedded solution.
  • Capacity billing model.

Embedding setup tool

What is the Embedding setup tool?

The Embedding setup tool allows you to quickly get started and download a sample application to begin embedding with Power BI.

Which solution should I choose?

I've downloaded the sample app, which solution do I choose?

If you're working with the Embed for your customers experience, save and unzip the file. Then open the PowerBI-Developer-Samples-master\App Owns Data folder and run the PowerBIEmbedded_AppOwnsData.sln file.

If you're working with the Embed for your organization experience, save and unzip the file. Then open the PowerBI-Developer-Samples-master\User Owns Data\integrate-report-web-app folder and run the pbi-saas-embed-report.sln file.

How can I edit my registered application?

To learn how to edit Azure AD-registered applications, see Quickstart: Update an application in Azure Active Directory.

How can I edit my Power BI user profile or data?

You can learn how to edit your Power BI data here.

For more information, see Troubleshooting your embedded application.

More questions? Try the Power BI Community