Active Hub: share Power BI reports with clients and partners without paying for per-user licenses
A ready-made portal, with your brand, that brings your Power BI reports into one place and delivers each one to the right person: clients, franchisees, sales representatives, suppliers and internal teams. People who only view reports don't need an individual license, and each person sees only the data they are allowed to see.
Ready-made portal with the Power BI Embedded APIs already integrated · 150,000+ hours on Power BI projects
Illustration with fictitious data






























What usually brings a company to Active Hub
- "Our Power BI license bill grows with every new person who needs to see a report."
- "We need to show KPIs to clients, and they aren't part of our Microsoft 365."
- "Each franchisee, branch or sales rep can only see their own numbers."
- "Reports are scattered across links, emails and workspaces, and nobody knows which one is official."
- "We want the reports inside our own system or portal, with our brand, not the standard Power BI interface."
How Active Hub reduces licensing costs
In the traditional model, everyone who opens a report in Power BI needs a license, and external users must also be invited into the company's environment. With Power BI Embedded, reports run on capacity sized to actual use, and the portal handles access.
| Sharing through Power BI | With Active Hub | |
|---|---|---|
| Viewers | Needs an individual Power BI license (below F64 capacity) | Access through the portal, no individual license |
| Clients and external users | Invited into the company's Microsoft 365, one by one | Portal login, without entering your tenant |
| What drives the cost | Number of people with access | Purchased capacity, sized to actual use |
| Who needs a Pro license | Everyone who accesses reports | Only those who create and publish reports |
| Experience | Power BI interface | Portal with your brand, colors and domain |
Power BI capacity (Microsoft Fabric or Power BI Embedded) is purchased by the company directly from Microsoft. Active BI helps choose the right size and validate the licensing model for your scenario, under Microsoft's rules.
Features that are already built
Active Hub is not a project to be built. The Power BI Embedded integrations, access management and security are already developed and tested.
Central report catalog
All official reports at one address, organized by department, client or topic. No more stray links or parallel versions.
Access groups and profiles
Create groups (by client, department, region or role) and define which reports each group sees. A new person joins a group and immediately gets the right access.
Row-level access filtering (RLS)
The same report shows each person only their own data, with the rule applied on the Power BI server, not on the screen.
Single sign-on (SSO)
Internal users sign in with their corporate Microsoft account, with no new password and under the security policies the company already uses.
Multi-company (multi-tenant)
Clients, franchises or group companies in the same portal, each one isolated, with its own users and reports.
User management
Add, block and remove access from one screen, without opening a Microsoft 365 ticket or relying on the client's IT team.
Your own brand (white-label)
Your company's logo, colors and domain. End users work in your portal, not in the Power BI interface.
Power BI Embedded APIs integrated
Access token generation, report and dashboard embedding and session control are already handled by the portal.
Active IA add-on
The same portal can host Active IA, so users can ask questions in natural language about the data they already see in the report.
RLS, or access filtering: the same report, a different slice for each person
RLS (Row-Level Security) is the Power BI feature that filters data based on who is signed in. You publish a single report and each person sees only their part. There is no need to create a copy of the report for each client, branch or sales rep, and no one sees anyone else's data.
Security: data stays where it is, and no one sees what they shouldn't
A report portal for clients and external users only works if security is treated as part of the product, not as a configuration step added later.
- Data stays in the company's Power BI. The portal displays the embedded reports; it does not copy or store the database.
- Temporary, per-report access token. The portal generates a short-lived token on the server, valid only for the content granted to that person. Users never receive Power BI credentials.
- RLS applied on the server. Power BI decides the data filter based on the user's identity. It doesn't rely on an on-screen filter that someone could remove.
- Isolation between clients. In the multi-company model, each client has its own users, groups and reports, with no crossover of information.
- Corporate login. With SSO, the company's Microsoft Entra ID policies apply, such as two-factor authentication and blocking access for people who have left.
- Option to run in your Azure. When deployed in the client's environment, the entire portal sits inside the company's tenant, under your governance.
Where Active Hub is used
KPI portal for clients
Service, logistics, facilities and consulting firms give clients their contract KPIs, under the company's brand, instead of sending spreadsheets and PDFs.
Franchise networks, branches and resellers
Each location tracks sales, targets and operations in the same report, seeing only its own numbers.
Sales representatives and field sales teams
Sales reps track their portfolio, orders and commission without a Power BI license for each of them.
Suppliers and partners
Service level, inventory and delivery KPIs shared with people outside the company, with controlled access.
Analytics inside your product
Software companies and platforms offer reports to their own customers as part of the product.
Multi-company groups
Holding companies and groups centralize reports from all companies, with access separated by company and by department.
We move your reports to the portal, and make them better than they are today
Migrating is more than publishing. We use the move to make reports faster, clearer and cheaper to run on capacity.
Inventory
We map the reports in use, who accesses each one and which are duplicated or abandoned.
Performance
We tune models and measures so they respond faster and consume less capacity, which directly affects cost.
Visuals and usability
We redesign screens for quick reading, in your brand's visual standard and with mobile in mind.
Publishing and access
We publish to Active Hub with groups, RLS and profiles configured and validated with the people who will use it.
Report and modeling projects follow the same methodology as our Power BI development consulting.
Already have a portal or system? We embed Power BI in it
If the company already has a client portal, an intranet or its own system, there is no need to replace it. We use the same Active Hub experience to embed Power BI Embedded reports in what already exists.
- Reused login. Users sign in with the login they already use in your system, and we map that identity to Power BI RLS rules, with no duplicate user records.
- Same security as Active Hub. Server-generated tokens, per-report access and isolation between clients.
- Integration with your development team. We deliver the embedding layer and support your team in integrating it with the system's screens.
To understand Power BI Embedded in depth, see Power BI Embedded. To bring together reports, documents and routines for internal audiences, see Analytics Portals.
Two ways to engage
Monthly subscription
You use Active Hub as a service, for a monthly fee. Active BI hosts, maintains and evolves the portal. Power BI capacity is purchased by the company from Microsoft.
Deployment in your environment
One-time fee to deploy Active Hub inside your company's Azure, under your governance. Power BI capacity also belongs to the company.
In both models, we start with a licensing assessment: how many people create reports and how many only consume them, which capacity fits your usage and which strategies reduce cost, such as sizing to actual use and pausing capacity outside usage hours. See also Power BI Licensing.
How to get started
Assessment
We map who accesses which reports, the current licensing and cost, and recommend the right model and capacity.
Configuration
Capacity, login, groups, profiles and RLS rules configured for your scenario.
Publishing
The first report is usually in the portal within 3 days after the required access is granted.
Evolution
Migration of the remaining reports, new groups and clients and, when it makes sense, Active IA in the same portal.
Active Hub FAQ
What is Active Hub?
Do clients and external users need a Power BI license?
What is RLS in Power BI?
How much does Active Hub cost?
How does Active Hub help reduce licensing costs?
Does Active Hub support single sign-on (SSO)?
We already have our own portal or system. Do we need to use Active Hub?
Do you help migrate reports to the portal?
Find out how much your company can save on Power BI licenses
In the assessment we map who accesses the reports, the current licensing and the capacity required, and show you how to share with clients and external users while paying only for what you need.
- You describe your scenario in two quick steps
- A specialist replies within 30 minutes, during business hours (Brasília time)
- A 30-minute conversation to understand your scenario and recommend a path
No commitment and no sales call sequence.
Request a licensing assessment
2 steps, under 40 seconds
Step 1 of 2