About tenant settings

Tenant settings enable fine-grained control over the features that are made available to your organization. If you have concerns around sensitive data, some of our features may not be right for your organization, or you may only want a particular feature to be available to a specific group.

Tenant settings that control the availability of features in the Power BI user interface can help to establish governance policies, but they're not a security measure. For example, the Export data setting doesn't restrict the permissions of a Power BI user on a dataset. Power BI users with read access to a dataset have the permission to query this dataset and might be able to persist the results without using the Export data feature in the Power BI user interface.


It can take up to 15 minutes for a setting change to take effect for everyone in your organization.

New tenant settings

To help you quickly identify changes and respond, a message at the top of the tenant settings page appears when there's a change. The message lists new tenant settings and changes to existing ones.

You can identify new settings according to their new icon.  

How to get to the tenant settings

Go to the Admin portal and select Tenant settings.

Screenshot of how to get to the tenant settings

How to use the tenant settings

Many of the settings can have one of three states:

  • Disabled for the entire organization: No one in your organization can use this feature.

    Disabled all setting

  • Enabled for the entire organization: Everyone in your organization can use this feature.

    Enabled all setting

  • Enabled for a subset of the organization: Specific security groups in your organization are allowed to use this feature.

    You can also enable a feature for your entire organization, Except specific security groups.

    Enabled subset setting

    You can also combine settings to enable the feature only for a specific group of users and also disable it for a group of users. Using this approach ensures that certain users don't have access to the feature even if they're in the allowed group. The most restrictive setting for a user applies.

    Enable except setting

Tenant setting sections

The sections of the tenant settings page are listed in the table below.

Next steps