Microsoft Power BI enables users to visualize data, share discoveries, and collaborate in intuitive new ways. To learn more, see Get started with Power BI.
Sign up for Power BI
Administration of Power BI
Security in Power BI
You can sign up for Power BI through the Power BI web site. You can also sign up through the purchase services page on the Office 365 admin center. When an administrator signs up for Power BI, they can assign user licenses to users who should have access.
Additionally, individual users in your organization may be able to sign up for Power BI through the Power BI web site. When a user in your organization signs up for Power BI, that user is assigned a Power BI license automatically. Learn more
There are three scenarios that might apply to users in your organization:
Scenario 1: Your organization already has an existing Office 365 environment and the user signing up for Power BI already has an Office 365 account. In this scenario, if a user already has a work or school account in the tenant (for example, contoso.com) but does not yet have Power BI, Microsoft will simply activate the plan for that account, and the user will automatically be notified of how to use the Power BI service.
Scenario 2: Your organization has an existing Office 365 environment and the user signing up for Power BI doesn’t have an Office 365 account. In this scenario, the user has an email address in your organization’s domain (for example, contoso.com) but does not yet have an Office 365 account. In this case, the user can sign up for Power BI and will automatically be given an account. This lets the user access the Power BI service. For example, if an employee named Nancy uses her work email address (for example, Nancy@contoso.com) to sign up, Microsoft will automatically add Nancy as a user in Contoso’s Office 365 environment and activate Power BI for that account.
Scenario 3: Your organization does not have an Office 365 environment connected to your email domain. There are no administrative actions your organization needs to take to take advantage of Power BI. Users will be added to a new, cloud-only user directory, and you will have the option to elect to take over as the tenant admin and manage them.
IMPORTANT: If your organization has multiple email domains and you prefer all email address extensions to be in the same tenant, add all email address domains to an Azure Active Directory tenant before any users sign up. There is no automated mechanism to move users across tenants after they have been created. For more information on this process, see If I have multiple domains, can I control the Office 365 tenant that users are added to? later in this article and Add your domain to Office 365 online.
There are steps you can take, as an admin, to prevent users from joining your existing Office 365 tenant. If you do block this, users’ attempts to sign up will fail and they will be directed to contact their organization’s admin. You do not need to repeat this process if you have already disabled automatic license distribution (e.g. Office 365 for Education for Students, Faculty, and Staff).
These steps require the use of Windows PowerShell. To get started with Windows PowerShell, see the PowerShell getting started guide.
To perform the following steps, you must install the latest 64-bit version of the Azure Active Directory Module for Windows PowerShell.
After you select the link, select Run to run the installer package.
Disable automatic tenant join: Use this Windows PowerShell command to prevent new users from joining a managed tenant:
To disable automatic tenant join for new users:
Set-MsolCompanySettings -AllowEmailVerifiedUsers $false
To enable automatic tenant join for new users:
Set-MsolCompanySettings -AllowEmailVerifiedUsers $true
Note: This blocking prevents new users in your organization from signing up for Power BI. Users that sign up for Power BI prior to disabling new signups for your organization will still retain their licenses. See the [How Can I Remove Licenses?] section for instructions on how you can remove access to Power BI for users that had previously signed up for the service.
To allow users to join your tenant, run the opposite command as described in the question above:
Set-MsolCompanySettings -AllowEmailVerifiedUsers $true
Use the following PowerShell script:
Get-MsolCompanyInformation | fl allow*
There are steps you can take, as an admin, to prevent users from signing up for Power BI. If you do block this, users’ attempts to sign up will fail and they will be directed to contact their organization’s admin. You do not need to repeat this process if you have already disabled automatic license distribution (e.g. Office 365 for Education for Students, Faculty, and Staff). Learn more
Note: The AllowAdHocSubscriptions flag is used to control several user capabilities in your organization, including the ability for users to sign up for the Azure Rights Management Service. Changing this flag will affect all of these capabilities.
To allow your existing users to sign up for Power BI, run the command listed for the above question, but pass true instead of false. Learn more
If your organization already has an existing Office 365 environment and all users in your organization have Office 365 accounts, identity management will not change.
If your organization already has an existing Office 365 environment but not all users in your organization have Office 365 accounts, we will create a user in the tenant and assign licenses based on the user’s work, or school, email address. This means that the number of users you are managing at any particular time will grow as users in your organization sign up for the service.
If you are managing your directory on-premises, and use Active Directory Federation Services (AD FS), Microsoft will not add users to your tenant, and users attempting to join your tenant will receive a message to contact their organization’s admin.
If your organization does not have an Office 365 environment connected to your email domain, there will be no change in how you manage identity. Users will be added to a new, cloud-only user directory, and you will have the option to elect to take over as the tenant admin and manage them.
Power BI provides an admin portal that allows you to view usage statistics, provides a link to the Office 365 admin center to manage users and groups, and the ability to control tenant wide settings. Learn more
Note: Your account needs to be marked as a Global Admin, within Office 365 or Azure Active Directory, to get access to the Power BI admin portal.
If a tenant was created by Microsoft, you can claim and manage that tenant by following these steps:
Join the tenant, by signing up for Power BI, using an email address domain that matches the tenant domain you want to manage. For example, if Microsoft created the contoso.com tenant, you will need to join the tenant with an email address ending with @contoso.com.
Claim admin control by verifying domain ownership: once you are in the tenant, you can promote yourself to a Global Admin role by verifying domain ownership. To do so, follow these steps:
Note: If this option doesn’t appear, there is already an Office 365 administrator in place.
If you do nothing, a tenant will be created for each user email domain and subdomain.
If you want all users to be in the same tenant regardless of their email address extensions:
Important: There is no supported automated mechanism to move users across tenants once they have been created. To learn about adding domains to a single Office 365 tenant, see Add your users and domain to Office 365.
If a user signed up for Power BI, but you no longer want them to have access to Power BI, you can remove the Power BI license for that user.
Navigate to the Office 365 admin center.
In the left navigation bar, select Users > Active Users.
Find the user you want to remove the license for, then select their name > Edit.
On the user details page, select Licenses in the left navigation bar.
Uncheck Power BI (free), or Power BI Pro, depending on what license is applied to their account.
Note: You can perform bulk license management to users as well. To do that, select multiple users and select Edit.
Users who have joined your tenant as part of this program are assigned a unique license that you can filter on within your active user pane in the admin dashboard.
To create this new view, in the Office 365 admin center, go to Users > Active Users, and on the Select a View menu, select New View. Name your new view, and under Assigned license, select Power BI (free) or Power BI Pro. You can only have one license selected per view. If you have both Power BI (free) and Power BI Pro licenses in your organization, you would need to create two views. Once the new view has been created, you will be able to see all the users in your tenant who have enrolled in this program.
You might experience an increase in password reset requests. For information about this process, see Reset a user's password.
You can remove a user from your tenant via the standard process in the Office 365 admin center. However, if the user still has an active email address from your organization, they will be able to rejoin unless you block all users from joining.
The Power BI (free) licenses are for the free version of Power BI. If you're interested in additional capabilities, take a look at the Power BI Pro version.
To learn more about Power BI compliance, see the Microsoft Trust Center.
Power BI is built on the foundation of Office 365, which in turn builds on Azure services like Azure Active Directory. For an overview of Power BI architecture, see Power BI Security.