- [Manu] Hello, and welcome to this video series
on the Power BI Adoption Framework,
which is about empowering every decision maker.
I'm Manu.
- [Paul] And I'm Paul.
- [Manu] And in this video, we'll talk about
what you need to manage in order
to appropriately manage the Power BI service.
In addition to administering PowerBI.com,
you also need to consider the management
of Azure Active Directory and Office 365,
which are services that are closely related
to the administration of your Power BI tenant.
Accounts and groups are stored
within Azure Active Directory,
which are used for individual access
or sharing with groups of users.
Subscriptions and licenses are managed by Office 365.
Workspaces are a great place to
collaboratively develop content,
and apps are a great way to create
a curated set of dashboards, reports,
and datasets to share in your organization.
When paired with groups, they enable
great collaboration and flexibility to customize.
Power BI tenant settings, gateways,
monitoring, and premium capacities also need to be managed,
and we will discuss these topics in more detail later.
At this point, it is worth discussing
who is responsible for creating security groups.
The intention of asking this question is
to have a real-world example of a situation
where multiple teams may be involved,
and the ownership of such activities
can sometimes be difficult to ascertain.
For example, this activity can be done
by your Office 365 administrators,
Azure Active Directory administrators, or the support team.
You may already be using Office 365 and Azure
and may already have this covered.
In which case, this can be an easy question.
Alternatively, this can be one of the questions
that needs to be followed up later.
The first version of app workspaces, or v1 app workspaces,
were linked to Office 365 groups, which meant that every time
you created a Power BI workspace,
an Office 365 group got created in various tools,
and similarly, creating a group in other Office 365 tools
meant that a workspace was added
to your Power BI workspaces.
In line with feedback from our customers,
the new version of app workspaces
does not create Office 365 groups,
which means that your Power BI workspaces
can now be managed separately.
If you're keen to use SharePoint
for version control of your Power BI files,
the workspace OneDrive feature
allows you to configure an Office 365 group
whose SharePoint document library
file storage is available to workspace users.
In terms of creating workspaces,
you can either allow all users to create app workspaces
or restrict to a specific group of individuals.
This comes back to the question of agility versus control,
and given that the app workspaces
are now managed within Power BI,
our recommendation is that you allow
all users to create app workspaces
and create a process for monitoring
and removing unwanted workspaces,
after providing users a warning
and giving them a short notice, of course.
In this slide, we've provided a recommendation
for how many app workspaces should be created
for each of the scenarios that we've listed
along with some reasoning.
Please feel free to pause the video at this point
and have a read through the options.
This is a generic guidance, though,
and you may have your own preferences
based on your ways of working.
Once you've reviewed the options on the previous slide,
it's worth discussing how you would like to balance
control and agility in your organization,
and what guidance you will provide to various teams
on creation of app workspaces.
Please bear in mind that this is likely to change over time,
and while you can follow our recommended approach up front,
you may choose a slightly different approach.
It will be good to document how
it will work in the short term,
and have a view on how it might work in the future.
- [Paul] Nearly all users who develop Power BI reports
will need Power BI Desktop installed on a Windows PC
unless they intend to exclusively build reports
in the Power BI service using the browser.
Power BI Desktop is available in 32-bit and 64-bit versions.
However, we recommend installing the 64-bit version
as this will allow you to handle larger volumes of data.
There is a new release of Power BI Desktop every month,
and for compatibility reasons,
it's important that all report developers
use the same release of Power BI Desktop.
It may not be possible to open files
created in newer versions of Power BI Desktop,
or downloaded from the Power BI service
when opening in an older version.
No subscription or license is required
to install or use Power BI Desktop.
On this slide, we've detailed the different options
available to you when it comes to managing
the installation of Power BI Desktop.
Please feel free to pause the video at this point
and read through the options.
As we've highlighted, installing via the Microsoft Store
on Windows 10 would be the recommended approach.
Some data sources that you use with Power BI Desktop
will require you to install drivers on the same machine.
We've provided links to those data
sources in the description below,
and if you're going to use any of those sources,
then you will need to have a mechanism in place
for how users will be able to install the relevant drivers.
Make sure to document this process
as well as how to request the drivers,
and make it available to the relevant
users in your organization.
Many organizations have compliance restrictions
and concerns specifically about sensitive
information residing on a device.
To mitigate these concerns and ensure we provide
these customers with the safest
and most compliant solution, we've integrated Intune
mobile application management capabilities
into the Power BI Mobile iOS and Android apps.
This enables organizations to protect
the corporate data with just a few clicks.
Some of these options include requiring
a unique PIN code to access the application,
requiring device compliance restrictions to access,
such as jailbreak rooting,
password protection, or device health.
This also helps to prevent data leakage
by restricting copying of data
from the application or screenshots.
It enables data encryption and also selective data wiping.
There are a number of options when
it comes to managing mobile applications
and devices in your organization.
You may already use mobile devices,
in which case, you can reach out to the relevant team
to find out how Power BI Mobile
can be made available on these devices.
If you're not currently using mobile
applications in your organization
and are looking to manage the Power BI Mobile application
and the device it can be used on,
there are a number of options, including Microsoft Intune.
We recommend documenting how users
will get access to Power BI Mobile
as well as what access controls
you've put in place for those users.
As well as deciding how you will manage the mobile devices,
you need to decide and document
who in your organization will be responsible
for administering the Power BI Mobile application.
If you're looking for guidance on how a partner
can help you to implement Microsoft Intune with Power BI,
or want to see what other options
are available from our partners,
then please check out the marketplace.
The link is in the description below.
We've included a link to the slides
used in this presentation in the description below.
Thanks for listening, and if you have any feedback
or questions, please leave a comment.
See you in the next one.