Manage Power BI visuals admin settings

As a Power BI administrator for your organization, you can control the type of Power BI visuals users can access across the organization and limit the actions users can perform.

To manage Power BI visuals, you must be a Global Administrator in Office 365, or have been assigned the Fabric administrator role. For more information about the Fabric administrator role, see Understanding Power BI administration roles.

Access the Power BI admin portal settings

You have to be a global admin or Fabric administrator to access the Power BI admin portal. For more information about the Fabric administrator role, see Understanding Power BI administration roles. To get to the Power BI admin portal, follow these steps:

  1. Sign in to Power BI by using your admin account credentials.

  2. From the page header, select ... > Settings > Admin portal.

    Settings menu with admin portal selected.

Power BI visuals tenant settings

To manage the tenant settings for Power BI visuals from the Admin Portal, go to Tenant settings and scroll down to Power BI visuals.

Screenshot of the Power BI visuals tenant settings location.

The UI tenant settings only affect Power BI service. If you want these settings to take effect in Power BI Desktop, use group policies. A table at the end of each section provides details for enabling the setting in Power BI Desktop.

Note

Changes to tenant settings do not affect Power BI visuals listed in the organizational visuals tab.

Visuals from AppSource or a file

Manage organizational access for the following type of Power BI visuals:

  • Custom visuals developers create by using the Power BI SDK and saved as a .pbiviz file.

  • Visuals downloaded from AppSource.

Use the following instructions to enable users in your organization to upload .pbiviz files, and add visuals from AppSource to their reports and dashboards:

  1. Expand the Allow visuals created using the Power BI SDK settings.

  2. Select Enabled.

  3. Choose who can upload .pbiviz and AppSource visuals:

    • Select The entire organization option to allow everyone in your organization to upload .pbiviz files, and add visuals from AppSource.

    • Select the Specific security groups option to manage uploading .pbiviz files, and adding visuals from AppSource using security groups. Add the security groups you want to manage to the Enter security groups text bar. The security groups you specify are excluded by default. If you want to include these security groups and exclude everyone else in the organization, select the Except specific security groups option.

  4. Select Apply.

    A screenshot showing the tenant settings menu in the Power BI admin settings. In the Power BI visuals section, the allow visuals created by using the Power BI S D K option is expanded, and the enabled button is turned on.

UI changes to tenant settings apply only to Power BI service. To enable users in your organization to upload .pbiviz files, and add visuals from AppSource to their visualization pane in Power BI Desktop, use AD Group Policy.

Key Value name Value
Software\Policies\Microsoft\Power BI Desktop\ EnableCustomVisuals 0 - Disable
1 - Enable (default)

Certified Power BI visuals

Certified Power BI visuals are visuals that meet the Microsoft Power BI team code requirements. They're tested to verify that they don't access external services or resources and that they follow secure coding patterns and guidelines.

When this setting is enabled, only certified Power BI visuals will render in your organization's reports and dashboards. Power BI visuals from AppSource or files that aren't certified will return an error message.

  1. From the admin portal, select Add and use certified visuals only.

  2. Select Enabled.

  3. Select Apply.

    A screenshot showing the tenant settings menu in the Power BI admin settings. In the Power BI visuals section, the add and use certified visuals only (block uncertified) option is expanded, and the enabled button is turned on.

UI changes to tenant settings apply only to Power BI service. To manage the certified visuals tenant setting in Power BI Desktop, use AD Group Policy.

Key Value name Value
Software\Policies\Microsoft\Power BI Desktop\ EnableUncertifiedVisuals 0 - Disable
1 - Enable (default)

Export data to file

When this setting is enabled, users can download data from a custom visual into a file on their storage device. This setting is separate from and not affected by download restrictions applied in your organization's export and sharing tenant settings.

Note

When this setting is enabled, a custom visual can export to files of the following types:

  • .txt
  • .csv
  • .json
  • .tmplt
  • .xml
  • .pdf
  • .xlsx
  1. Expand the Allow downloads from custom visuals settings.

  2. Select Enabled.

  3. Choose who can download files:

    • Select The entire organization option to allow everyone in your organization to download data from a visual into a file.
    • Select the Specific security groups option to limit downloading files to specific security groups. Enter the security groups you want in the Enter security groups text bar. The security groups you specify are included by default. If you want to exclude these security groups and include everyone else in the organization, select the Except specific security groups option.
  4. Select Apply.

    Screenshot of the Power BI setting that allows downloads from custom visuals.

UI changes to tenant settings apply only to Power BI service. To enable users in your organization to download data from custom visuals in Power BI Desktop, use AD Group Policy.

Key Value name Value
Software\Policies\Microsoft\Power BI Desktop\ AllowCVToExportDataToFile 0 - Disable
1 - Enable (default)

When AllowCVToExportDataToFile is set to 1, the custom visual can export data to a file only if:

  • The feature switch in the admin portal is enabled.
  • The user is logged on.

Organizational visuals

As a Power BI admin, you can manage the list of Power BI visuals available in your organization's organizational store. The Organizational visuals tab, in the Admin portal, allows you to add and remove visuals and decide which visuals will automatically display in the visualization pane of your organization's users. You can add to the list any type of visual including uncertified visuals and .pbiviz visuals, even if they contradict the tenant settings of your organization.

Organizational visuals settings are automatically deployed to Power BI Desktop.

Note

Organizational visuals are not supported in Power BI Report Server.

Add a visual from a file

Use this method to add a new Power BI visual from a .pbiviz file.

Warning

A Power BI visual uploaded from a file could contain code with security or privacy risks. Make sure you trust the author and the source of the visual before deploying to the organization's repository.

  1. Select Add visual > From a file.

    A screenshot showing the organizational visuals menu in the Power BI admin settings. The add visual option is expanded, and the from a file option is selected.

  2. Fill in the following fields:

    • Choose a .pbiviz file - Select a visual file to upload.

    • Name your visual - Give a short title to the visual, so that report authors can easily understand what it does.

    • Icon - Upload an icon file to be displayed in the visualization pane.

    • Description - Provide a short description of the visual to give more context for the user.

    • Access - This section has two options:

      • Select whether users in your organization can access this visual. This setting is enabled by default.

      • Select whether this visual will appear in the visualization pane of the users in your organization. This setting is disabled by default. For more information, see add a visual to the visualization pane.

    A screenshot of the add visual pop up menu with the options described in step two.

  3. To initiate the upload request, select Add. After it's uploaded, the visual will display in the organizational visuals list.

Add a visual from AppSource

Use this method to add a new Power BI visual from AppSource.

AppSource Power BI visuals are automatically updated. Users in your organization will always have the latest version of the visual.

  1. Select Add visual > From AppSource.

    A screenshot showing the organizational visuals menu in the Power BI admin settings. The add visual option is expanded, and the from app source option is selected.

  2. In the Power BI visuals window, find the AppSource visual you want to add, and select Add. After it's uploaded, the visual will display in the organizational visuals list.

Add a visual to the visualization pane

You can pick visuals from the organizational visuals page to automatically show on the visualization pane of all the users in your organization.

  1. In the row of the visual you want to add, select settings.

    A screenshot showing the organizational visuals menu in the Power BI admin settings. The add visual option is expanded. The from app source option is selected and a list of app source visuals is displayed. The screenshot also shows a cog settings menu button selected next to one of the visuals.

  2. Enable the visualization pane setting and select Update.

    A screenshot showing the Visual Settings dialog box with the second button in the access area titled: the visual will appear in the visualization pane for the entire organization, enabled.

Delete a visual uploaded from a file

To permanently delete a visual, select the trash bin icon for the visual in the repository.

Important

Deletion is irreversible. After the visual is deleted, it immediately stops rendering in existing reports. Even if you upload the same visual again, it won't replace the one that was deleted. However, users can import the new visual again and replace the instance they have in their reports.

Disable a .pbiviz visual

You can disable a .pbiviz visual from being available through the organizational store, while keeping it on the organizational visuals list.

  1. In the row of the .pbiviz visual you want to disable, select settings.

  2. In the Access section, disable the setting: Users in the organization can access, view, share, and interact with this visual.

After you disable the .pbiviz visual, the visual won't render in existing reports, and it displays the following error message:

This custom visual is no longer available. Contact your administrator for details.

Note

.pbiviz visuals that are bookmarked continue working even after they've been disabled.

Update a visual

AppSource visuals are updated automatically. After a new version is available from AppSource, it will replace an older version deployed via the organizational visuals list.

To update a .pbiviz visual, follow these steps to replace the visual.

  1. In the row of the visual you want to add, select settings.

  2. Select Browse, and select the .pbiviz you want to replace the current visual with.

  3. Select Update.

Replace a visual from a file with a visual from AppSource

Sometimes an organization develops its own Power BI visual and distributes it internally. After some time, the organization might decide to make this visual public by uploading it to AppSource. To replace the visual uploaded from a file with the one from AppSource, use the following steps:

  1. Add the visual from AppSource into the organizational store.

  2. Open the report that contains this visual. Both the visual uploaded from a file and the AppSource visual are visible in the visualization pane.

  3. In the report, highlight the visual uploaded from a file and in the visualization pane, select the AppSource visual to replace it. The visuals are swapped automatically. To verify that you're using the AppSource visual, in the visualization pane right-click the visual and select about.

  4. Complete step 3 for all the reports that contain the visual in your organization.

  5. Delete the visual that was uploaded from a file.

Next steps