Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
- A Power BI Pro license is sufficient for developing and publishing reports into a workspace that backs an embedded solution. For using REST APIs and managing workspaces/capacities, a Pro or Premium Per User (PPU) license or a service principal is required. End users of the embedded solution do not need Pro/PPU licenses when using the embed for your customers pattern.
- For a public-facing website where users access dashboards without signing in, the correct architectural pattern is Power BI embedded analytics – Embed for your customers (app owns data). This pattern:
- Targets external users.
- Uses non-interactive authentication via a service principal or master user.
- Does not require app users to have Power BI licenses. Power BI Embedded with A SKUs (Azure-based capacity) is associated with this embed for your customers solution.
- Starting with an A1 capacity is a common approach for small to medium usage because Power BI Embedded capacity is billed hourly and can be scaled up or down. Customers may change usage on an hourly basis and there is no monthly or annual commitment. Billing continues while the capacity is active, so pausing the resource is required to stop billing.
- Key limitations and best practices for embedding for external users:
- Capacity requirement for production: For production use, a dedicated capacity (A, P/EM, or F SKU) is required. Free embed trial tokens are limited to development testing only; until a capacity is purchased, a Free trial version banner appears on embedded content.
- Licensing for app users: In embed for your customers, app users do not need Power BI licenses; only the developer/admin side needs Pro/PPU or a service principal for REST APIs and workspace management.
- Row-level security (RLS): When different external users should see different subsets of data, configure RLS on the semantic model and integrate it with the app’s identity/authorization logic.
- Unsupported visuals: R and Python visuals are not supported in embed for your customers scenarios.
- Client integration: Use the Power BI client APIs (JavaScript/TypeScript) to tightly integrate navigation, filters, slicers, layout, and bookmarks into the web application.
- Microsoft Fabric is not required for this scenario. For embed for your customers in production, a capacity-based product is required, and Power BI Embedded (A SKUs) is the Azure offer specifically associated with this pattern. Fabric (F SKUs) is another capacity option but is not mandatory if the requirement is simply to embed Power BI content for external users.
Overall, the optimal setup for a secure, scalable, interactive public data portal is:
- Use Power BI Pro (or PPU) for development and administration.
- Implement Power BI embedded analytics – Embed for your customers with A SKU capacity (starting with A1 and scaling as needed).
- Authenticate via a service principal or master user; do not require end users to sign in with Power BI accounts.
- Apply RLS and other security controls at the data/model level as needed.
References: