Glossary
Embedded analytics glossary
Plain definitions of the terms you meet when sharing dashboards with customers, partners and teams.
- Embedded analytics
- Dashboards and reports shown inside another application or portal, so users see data where they already work instead of opening a separate BI tool. Learn more
- Customer-facing analytics
- Dashboards shared with people outside your company, such as customers, partners, franchisees or clients, usually with each viewer limited to their own data. Learn more
- Row-level security (RLS)
- A rule that filters the rows in a dataset based on who is viewing, so one dashboard can safely serve many customers or regions. Learn more
- Multi-tenant analytics
- One analytics setup that serves many separate customers (tenants), each isolated from the others by access rules and filters. Learn more
- White-label analytics
- Analytics delivered under your own brand: your logo, colors, domain and email sender, with no third-party branding shown to viewers. Learn more
- Single sign-on (SSO) and SAML
- Letting users sign in with an existing company identity provider instead of a separate password. SAML is a common standard for this. Learn more
- User impersonation
- An admin feature that shows the portal exactly as a specific user sees it, used to test access and row-level security. Learn more
- Power BI Embedded and Fabric capacity
- Microsoft's way to embed Power BI reports in an app. Reports run on dedicated capacity, so external viewers do not need individual Pro licenses. Learn more
- Service principal
- An application identity in Microsoft Entra ID (Azure AD) that lets software call Power BI APIs without a named user account. Learn more
- App owns data vs user owns data
- Two Power BI embedding models. In app owns data, the app authenticates to Power BI for its users. In user owns data, each user signs in with their own Power BI account. Learn more
- Tableau Connected Apps
- Tableau's trusted authentication method for embedding, where your app signs a short-lived token (JWT) so users do not sign in to Tableau separately. Learn more
- Values passed when generating a QuickSight embed URL that drive row-level security for anonymous or federated users. Learn more
- Signed embedding
- Embedding where the server signs each dashboard URL or token, so parameters such as customer ID cannot be changed by the viewer. Used by Looker and Metabase, among others. Learn more
- Audit log
- A record of who logged in, viewed or exported which dashboard and when, plus admin changes. Learn more
Put these ideas to work
Share Power BI, Tableau and more in one branded portal.