适用于美国政府客户的 Power BIPower BI for US government customers

本文适用于将 Power BI 作为 Microsoft 365 政府版计划的一部分进行部署的美国政府客户。This article is for US government customers who are deploying Power BI as part of a Microsoft 365 Government plan. 政府版计划专为必须满足美国合规性和安全性标准的组织的独特需求而设计。Government plans are designed for the unique needs of organizations that must meet US compliance and security standards. 为美国政府客户设计的 Power BI 服务不同于 Power BI 服务的商业版本。The Power BI service that's designed for US government customers differs from the commercial version of the Power BI service. 下面几节说明了这些特性差异和功能。These feature differences and capabilities are described in the following sections.

将 Power BI 添加到 Microsoft 365 政府版计划Add Power BI to your Microsoft 365 Government plan

必须先注册 Microsoft 365 政府版计划,然后才能获取 Power BI 美国政府版订阅并将许可证分配给用户。Before you can get a Power BI US government subscription and assign licenses to users, you have to enroll in a Microsoft 365 Government plan. 如果组织已有 Microsoft 365 政府版计划,请跳到购买适用于政府客户的 Power BI Pro 订阅If your organization already has a Microsoft 365 Government plan, skip ahead to Buy a Power BI Pro subscription for government customers.

注册 Microsoft 365 政府版计划Enroll in a Microsoft 365 Government plan

如果你是新客户,则必须先验证组织的资格,然后才能注册 Microsoft 365 政府版计划。If you're a new customer, you have to validate your organization's eligibility before you can sign up for a Microsoft 365 Government plan. 请先完成 Microsoft 365 政府版资格验证表单Get started by completing the Microsoft 365 for Government eligibility validation form. 若要确保为组织选择正确的计划,请参阅 Microsoft 365 美国政府服务说明To ensure that you're selecting the right plan for your organization, consult the Microsoft 365 US Government service descriptions.

备注

如果已将 Power BI 部署到商业环境中并想要迁移到美国政府云,则需要将新的 Power BI Pro 订阅添加到 Microsoft 365 政府版计划中。If you've already deployed Power BI to a commercial environment and want to migrate to the US government cloud, you'll need to add a new Power BI Pro subscription to your Microsoft 365 Government plan. 接下来,将商业数据复制到适用于美国政府的 Power BI 服务,从用户帐户中删除商业许可证分配,然后将 Power BI Pro 政府版许可证分配给用户帐户。Next, replicate the commercial data to the Power BI service for US government, remove commercial license assignments from user accounts, and then assign a Power BI Pro government license to the user accounts.

购买适用于政府客户的 Power BI Pro 订阅Buy a Power BI Pro subscription for government customers

部署 Microsoft 365 后,可以添加 Power BI Pro 订阅。After you've deployed Microsoft 365, you can add a Power BI Pro subscription. 按照注册美国政府组织中的分步指南来购买 Power BI Pro 政府版服务。Follow the step-by-step guidance in Enroll your US government organization to buy the Power BI Pro government service. 为需要使用 Power BI 的所有用户购买足够的许可证,然后将这些许可证分配给单个用户帐户。Buy enough licenses for all the users who need to use Power BI, and then assign the licenses to individual user accounts.

重要

Power BI 美国政府版不可用作免费许可证。Power BI US Government isn't available as a Free license. 若要访问政府社区云,必须为每个用户分配 Pro 许可证。To access the government community cloud, each user must be assigned a Pro license. 如果为用户帐户分配了免费许可证,则用户只能访问商业云,并会遇到身份验证和访问权限问题。If a user account has been assigned a Free license, the user is authorized to access only the commercial cloud and will encounter authentication and access issues. 如果你已购买 Power BI Premium,则你无需分配 Pro 许可证即可启用用户访问权限。If you've purchased Power BI Premium, you don't have to assign Pro licenses to enable user access. 只要将报表发布到 Premium 容量,组织中的用户都可以访问与他们共享的报表。Users in the organization can access reports that are shared with them as long as the reports are published to a Premium capacity. 若要查看许可证类型之间的差异,请参阅按许可证类型划分 Power BI 服务功能To review the differences between license types, see Power BI service features by license type.

政府云实例Government cloud instances

Microsoft 365 为政府机构提供不同的环境,以满足不同的符合性要求。Microsoft 365 provides different environments for government agencies to meet varying compliance requirements. 有关每个环境的详细信息,请参阅:For more information about each environment, see:

登录到适用于美国政府的 Power BISign in to Power BI for US government

对于政府用户和商业用户,用于连接到 Power BI 的 URL 有所不同。The URL for connecting to Power BI differs for government users and commercial users. 若要登录 Power BI,请使用以下 URL:To sign in to Power BI, use the following URLs:

商业版本Commercial version GCCGCC GCC HighGCC High DoDDoD
https://app.powerbi.com/ https://app.powerbigov.us https://app.high.powerbigov.us https://app.mil.powerbigov.us

你的帐户可能已在多个云中设置。Your account might be set up in more than one cloud. 如果通过这种方式设置了帐户,则当登录 Power BI Desktop 时,可以选择要连接的云。If your account is set up that way, when you sign in to Power BI Desktop, you can choose which cloud to connect to.

允许连接到 Power BIAllow connections to Power BI

若要使用 Power BI 服务,必须允许连接到 Internet 上所需的终结点。To use the Power BI service, you must allow connections to required endpoints on the internet. 若要在你自己的网络、Power BI 和其他依赖服务之间实现通信,必须可以访问这些目标。These destinations have to be reachable to enable communication between your own network, Power BI, and other dependent services.

下表列出了要添加到允许列表中的终结点,这些终结点是与 Power BI 服务建立连接以支持常规站点使用所必需的。In the table below, we list the required endpoints to add to your allow list to enable connection to the Power BI service for general site usage. 它们也是美国政府云所独有的。These endpoints are unique to the US government cloud. Power BI 服务只需针对列出的终结点打开 TCP 端口 443。The Power BI service requires only TCP Port 443 to be opened for the listed endpoints. 用于获取数据、仪表板和报表集成、Power BI 视觉对象以及其他可选服务的终结点并非美国政府云独有。The endpoints for getting data, dashboard and report integration, Power BI visuals, and other optional services aren’t unique to the US government cloud. 若要将这些 URL 也添加到允许列表中,请参阅将 Power BI URL 添加到允许列表To also add these URLs to your allow list, see Add Power BI URLs to your allow list.

Power BI 的身份验证、标识和管理依赖于与 Microsoft 365 服务的连接。Authentication, identity, and administration for Power BI depend on connectivity to Microsoft 365 services. 若要查看审核日志,也必须连接到 Microsoft 365。You also have to connect to Microsoft 365 to view audit logs. 若要标识这些服务的终结点,请参阅下表中的 Microsoft 365 集成。To identify the endpoints for these services, see Microsoft 365 integration in the table below.

支持常规站点使用的 Power BI URLPower BI URLs for general site usage

用途Purpose 目标Destination
后端 APIBackend APIs GCC:api.powerbigov.usGCC: api.powerbigov.us
GCC-High:api.high.powerbigov.usGCC-High: api.high.powerbigov.us
DoD:api.mil.powerbi.gov.usDoD: api.mil.powerbi.gov.us
后端 APIBackend APIs GCC:*analysis.usgovcloudapi.netGCC: *analysis.usgovcloudapi.net
GCC High:*.high.analysis.usgovcloudapi.netGCC High: *.high.analysis.usgovcloudapi.net
DoD:*.mil.analysis.usgovcloudapi.netDoD: *.mil.analysis.usgovcloudapi.net
后端 APIBackend APIs 全部:*.pbidedicated.usgovcloudapi.netAll: *.pbidedicated.usgovcloudapi.net
内容分发网络 (CDN)Content Delivery Network (CDN) GCC:gov.content.powerapps.usGCC: gov.content.powerapps.us
GCC High:high.content.powerapps.usGCC High: high.content.powerapps.us
DoD:mil.content.powerapps.usDoD: mil.content.powerapps.us
Microsoft 365 集成Microsoft 365 integration GCC全球终结点GCC: Worldwide endpoints
GCC High美国政府 GCC High 终结点GCC High: US Government GCC High endpoints
DoD美国政府 DOD 终结点DoD: US Government DOD endpoints
门户Portal GCC:*.powerbigov.usGCC: *.powerbigov.us
GCC-High:*.high.powerbigov.usGCC-High: *.high.powerbigov.us
DoD:*.mil.powerbigov.usDoD: *.mil.powerbigov.us
服务遥测Service telemetry 全部:dc.services.visualstudio.usAll: dc.services.visualstudio.us
信息性消息(可选)Informational messages (optional) 全部:dynmsg.modpim.comAll: dynmsg.modpim.com
NPS 调查(可选)NPS surveys (optional) 全部:nps.onyx.azure.netAll: nps.onyx.azure.net

连接政府版本和全局 Azure 云服务Connect government and global Azure cloud services

Azure 分布在多个云中。Azure is distributed across multiple clouds. 默认情况下,你可以启用防火墙规则以打开与特定于云的实例的连接,但跨云网络不同。By default, you can enable firewall rules to open a connection to a cloud-specific instance, but cross-cloud networking is different. 若要在公有云中的服务和政府社区云中的服务之间进行通信,必须配置特定的防火墙规则。To communicate between services in the public cloud and services in the Government Community Cloud, you have to configure specific firewall rules. 例如,如果要从 Power BI 的政府云部署中访问 SQL 数据库的公有云实例,则需要 SQL 数据库中的防火墙规则。For example, if you want to access public cloud instances of a SQL database from your government cloud deployment of Power BI, you need a firewall rule in the SQL database. 为 SQL 数据库配置特定的防火墙规则,以便为以下数据中心建立与 Azure 政府云的连接:Configure specific firewall rules for SQL databases to allow connections to the Azure Government Cloud for the following datacenters:

  • USGov IowaUSGov Iowa
  • USGov VirginiaUSGov Virginia
  • USGov TexasUSGov Texas
  • USGov ArizonaUSGov Arizona
  • US DoD 东部US DoD East
  • US DoD 中部US DoD Central

若要获取美国政府云 IP 范围,请下载 Azure IP 范围和服务标记 - 美国政府云文件。To get the US government cloud IP ranges, download the Azure IP Ranges and Service Tags – US Government Cloud file. 其中列出了 Power BI 和 Power Query 的 IP 范围。ranges are listed for both Power BI and Power Query.

有关 Microsoft Azure 政府云服务的详细信息,请参阅 Azure 政府文档For more information about Microsoft Azure Government cloud services, see Azure Government documentation.

若要为 SQL 数据库设置防火墙,请创建和管理 IP 防火墙规则To set up firewalls for SQL databases, see Create and manage IP firewall rules.

Power BI 功能可用性Power BI feature availability

为了满足政府云客户的要求,政府版计划与商业版计划之间存在一些差异。To accommodate the requirements of government cloud customers, there are some differences between government plans and commercial plans. 我们的目标是在公开上市后的 30 天内,在政府云中提供所有功能。Our goal is to make all features available in government clouds within 30 days of general availability. 在某些情况下,我们因为底层依赖项而无法提供功能。In some cases, underlying dependencies prevent us from making a feature available. 下面的列表显示了特定政府环境中尚未提供或以有限功能提供的功能。The list below shows features that aren't yet available in a particular government environment or that are available with limited functionality. 此列表使用以下项:The list uses the following key:

密钥Key 说明Description
可用 此功能在环境中可用,并且在脚注中定义了任何异常。The feature is available in the environment, with any exceptions defined in footnotes.
不可用 此功能在环境中不可用,我们没有估计的交付时间范围。The feature isn't available in the environment and we don't have an estimated time frame for delivery.

如果为环境计划了发布,我们将包括用于估计可用性的季度。We include the quarter for estimated availability if release is planned for an environment.

功能Feature GCCGCC GCC HighGCC High DoDDoD
政府云和商业云之间的 Azure B2B 协作1Azure B2B Collaboration between government and commercial cloud1 可用 不可用 不可用
使用 Power BI Web 部件在 SharePoint Online 中嵌入Embed in SharePoint Online using the Power BI web part 可用 可用 不可用
用于数据驱动警报的 Power Automate 连接Power Automate connectivity for data-driven alerts 可用 可用 不可用
Teams 中 Power BI 选项卡2Power BI tab in Teams2 可用 不可用 不可用
大型模型Large models 不可用 不可用 不可用
数据流 - SQL 计算引擎优化Dataflows - SQL Compute engine optimization 不可用 不可用 不可用
数据流 - 直接查询Dataflows - Direct Query 不可用 不可用 不可用
数据保护(MIP 标签)Data Protection (MIP labels) 不可用 不可用 不可用
模板应用3Template apps3 不可用 不可用 不可用
自定义视觉对象3Custom Visuals3 不可用 不可用 不可用
Azure 流分析Azure Stream Analytics 不可用 不可用 不可用
调用质量数据连接器Call Quality Data Connector 不可用 不可用 不可用
自带存储 (Azure Data Lake Gen 2)Bring Your Own Storage (Azure Data Lake Gen 2) 不可用 不可用 不可用
QR 码生成QR Code generation 不可用 不可用 不可用

1 尽管可以在 GCC 中进行 B2B 协作,但必须在该环境中向外部用户发出许可证。1 Although B2B Collaboration is available for GCC, the external user must be issued a license in that environment. 商业云许可证在 GCC 中无效。Commercial cloud licenses aren't valid in GCC. 有关美国政府 B2B 协作已知限制的详细信息,请参阅比较 Azure 政府和全球 AzureFor more information about known limitations with B2B Collaboration for US government, Compare Azure Government and global Azure.

2 适用于 GCC 的 Teams 中的 Power BI 体验受到限制,仅适用于经典工作区,不包括在 Microsoft Teams 中嵌入 Power BI 内容中所述的增强功能。2 The Power BI experience in Teams for GCC is limited, works only for classic workspaces, and doesn't include the enhanced functionality described in Embed Power BI Content in Microsoft Teams.

3 对于政府云,针对版本的模板应用和自定义视觉对象的功能将受到限制。3 The functionality for Template Apps and Custom Visuals on release will be limited for government clouds. 发布版本时将发布有关特定限制的详细信息。More information about specific limitations will be published at release.

后续步骤Next steps