User Types
DataCentral supports four distinct user identity types. The type of user determines how they authenticate, how they are managed, and how they consume Power BI licenses.
1. Azure AD (Internal)
These are users who exist within your organization's primary Microsoft Entra ID (Azure AD) tenant.
- Authentication: They log in using their standard Microsoft 365 credentials.
- Licensing: When viewing a report, they use their own personal Power BI Pro or Premium Per User (PPU) license. If the workspace is on a dedicated Power BI Premium capacity (P SKU or F SKU), a Pro license is not required.
- Management: These users can be managed individually in DataCentral, or their membership can be automatically synchronized using Microsoft Graph Sync.
2. External Azure AD (Guest)
These are users who belong to a different organization's Entra ID tenant but have been invited into your directory as B2B Guest users.
- Authentication: They log in using their home organization's Microsoft credentials.
- Licensing: Like internal users, they typically bring their own Power BI Pro license (BYOL) or rely on your dedicated Premium capacity.
- Management: They must first be invited as Guests in your Azure portal before they can be added to DataCentral.
3. User Pass
User Pass accounts are local credentials managed entirely within DataCentral. They do not exist in Microsoft Entra ID.
- Authentication: They log in using a username and password created by a DataCentral Tenant Administrator.
- Licensing: Because they do not have Microsoft identities, they cannot use personal Power BI licenses. Instead, DataCentral uses a Power BI Service Principal to generate an embed token for them. This is known as "App Owns Data" embedding or "License Pooling."
- Use Case: Ideal for sharing data with external clients, partners, or contractors who do not use Microsoft 365, or when you want to absorb the licensing cost on their behalf.
4. Mobile ID
Mobile ID users authenticate securely using their mobile devices rather than a password. Like User Pass accounts, they are managed within DataCentral and do not require an Entra ID account.
- Authentication: Users enter their mobile number on the login screen. A prompt is sent to their device, requiring biometric approval (e.g., FaceID, TouchID).
- Licensing: Mobile ID users rely on a Power BI Service Principal to access reports, identical to User Pass accounts.
- Use Case: Ideal for frontline workers, executives, or external partners who need secure, frictionless access to data on the go.
Summary Comparison
| User Type | Authentication | Identity Source | Power BI Licensing |
|---|---|---|---|
| Azure AD | Microsoft 365 | Your Entra ID | User's Pro License (or Premium Capacity) |
| External Azure AD | Microsoft 365 | Guest's Entra ID | User's Pro License (or Premium Capacity) |
| User Pass | Username/Password | DataCentral | Service Principal (License Pooling) |
| Mobile ID | Biometric Prompt | DataCentral | Service Principal (License Pooling) |
Next Steps
Now that you understand the different user types, learn how to Create and Manage Users and assign them to Organizational Units.