With Power BI, you can use an app built by a company or individual other than Microsoft. For example, you might use a third party app which integrates Power BI tiles into a custom built web application. When you use a third party app, you will be asked to grant that application certain permissions to your Power BI account and resources. It is important that you only grant permissions to applications that you know and trust. Permissions to an application can be revoked at any time. See Revoke third party app permissions.

Here are the types of access an application can request.

Power BI App permissions

  • View all Dashboards

    • This permission gives an application the ability to view all dashboards you have access to. This includes dashboards that you own, have gotten from content packs, and have been shared to you and are in groups that you belong to. The application cannot make any modifications to the dashboard. Among other things, this permission can be used by an application to embed your dashboard content into its experiences.
  • View all Reports

    • This permission gives an application the ability to view all reports you have access to. This includes reports that you own, have gotten from content packs, and are in groups that you belong to. Part of viewing the report, means that the application can also see the data within it. The application cannot make any modifications to the reports themselves. Among other things, this permission can be used by an application to embed your report content into its experiences.
  • View all Datasets

    • This permission gives an application the ability to list all datasets that you have access to. This includes datasets that you own, have gotten from content packs, and are in groups that you belong to. An application can see the names of all your datasets as well as their structure including table and column names. This permission gives rights to read the data in a dataset. The permission does not give the application rights to add or make changes to a dataset.
  • Read and Write all Datasets

    • This permission gives an application the ability to list all datasets that you have access to. This includes datasets that you own, have gotten from content packs, and are in groups that you belong to. An application can see the names of all your datasets as well as their structure including table and column names. This permission gives rights to read and write the data in a dataset. The application can also create new datasets, or make modifications to existing ones. This is commonly used by an application to send to data directly to Power BI.
  • View user's Groups

    • This permission gives the application the ability to list all groups that you are a member of. It can use this permission along with some of the other permissions listed to view or update content for that particular group. The application cannot make modifications to the group itself.

Revoke third party app permissions

You revoke permissions for a third party app by going to the Office 365 My Apps site.

On the Office 365 My apps site, here's how to revoke third party permissions:

  1. Go to Office 365 My Apps site.
  2. On the My apps page, locate the third party app.
  3. Hover over the app tile, click the (...) button, and click Remove.