Active Hub · Power BI Embedded portal

Active Hub: share Power BI reports with clients and partners without paying for per-user licenses

A ready-made portal, with your brand, that brings your Power BI reports into one place and delivers each one to the right person: clients, franchisees, sales representatives, suppliers and internal teams. People who only view reports don't need an individual license, and each person sees only the data they are allowed to see.

Ready-made portal with the Power BI Embedded APIs already integrated · 150,000+ hours on Power BI projects

Companies that trust Active BI
Camargo CorrêaQueiroz GalvãoVF Gomes ConstrutoraAlya ConstrutoraBRZ EmpreendimentosFTD EducaçãoAmcorAssa AbloyBrasilAgroCommShopDanielGrupo ElcanoEngieÉpocaEstaf EquipamentosSJC BioenergiaInBettaISHLenovoMarelliMotorolaNorcoastOceanPactPorto do AçuRichetStellantisSuzanoStanleyState Grid Corporation of ChinaActive BI team reviewing a project together

What usually brings a company to Active Hub

  • "Our Power BI license bill grows with every new person who needs to see a report."
  • "We need to show KPIs to clients, and they aren't part of our Microsoft 365."
  • "Each franchisee, branch or sales rep can only see their own numbers."
  • "Reports are scattered across links, emails and workspaces, and nobody knows which one is official."
  • "We want the reports inside our own system or portal, with our brand, not the standard Power BI interface."

How Active Hub reduces licensing costs

In the traditional model, everyone who opens a report in Power BI needs a license, and external users must also be invited into the company's environment. With Power BI Embedded, reports run on capacity sized to actual use, and the portal handles access.

Sharing through Power BIWith Active Hub
ViewersNeeds an individual Power BI license (below F64 capacity)Access through the portal, no individual license
Clients and external usersInvited into the company's Microsoft 365, one by onePortal login, without entering your tenant
What drives the costNumber of people with accessPurchased capacity, sized to actual use
Who needs a Pro licenseEveryone who accesses reportsOnly those who create and publish reports
ExperiencePower BI interfacePortal with your brand, colors and domain

Power BI capacity (Microsoft Fabric or Power BI Embedded) is purchased by the company directly from Microsoft. Active BI helps choose the right size and validate the licensing model for your scenario, under Microsoft's rules.

Features that are already built

Active Hub is not a project to be built. The Power BI Embedded integrations, access management and security are already developed and tested.

Central report catalog

All official reports at one address, organized by department, client or topic. No more stray links or parallel versions.

Access groups and profiles

Create groups (by client, department, region or role) and define which reports each group sees. A new person joins a group and immediately gets the right access.

Row-level access filtering (RLS)

The same report shows each person only their own data, with the rule applied on the Power BI server, not on the screen.

Single sign-on (SSO)

Internal users sign in with their corporate Microsoft account, with no new password and under the security policies the company already uses.

Multi-company (multi-tenant)

Clients, franchises or group companies in the same portal, each one isolated, with its own users and reports.

User management

Add, block and remove access from one screen, without opening a Microsoft 365 ticket or relying on the client's IT team.

Your own brand (white-label)

Your company's logo, colors and domain. End users work in your portal, not in the Power BI interface.

Power BI Embedded APIs integrated

Access token generation, report and dashboard embedding and session control are already handled by the portal.

Active IA add-on

The same portal can host Active IA, so users can ask questions in natural language about the data they already see in the report.

RLS, or access filtering: the same report, a different slice for each person

RLS (Row-Level Security) is the Power BI feature that filters data based on who is signed in. You publish a single report and each person sees only their part. There is no need to create a copy of the report for each client, branch or sales rep, and no one sees anyone else's data.

Campinas franchiseesees only Campinas
Southern region sales repsees only their own portfolio
Client A of your servicesees only their company's contract
Leadershipsees all branches

Security: data stays where it is, and no one sees what they shouldn't

A report portal for clients and external users only works if security is treated as part of the product, not as a configuration step added later.

  • Data stays in the company's Power BI. The portal displays the embedded reports; it does not copy or store the database.
  • Temporary, per-report access token. The portal generates a short-lived token on the server, valid only for the content granted to that person. Users never receive Power BI credentials.
  • RLS applied on the server. Power BI decides the data filter based on the user's identity. It doesn't rely on an on-screen filter that someone could remove.
  • Isolation between clients. In the multi-company model, each client has its own users, groups and reports, with no crossover of information.
  • Corporate login. With SSO, the company's Microsoft Entra ID policies apply, such as two-factor authentication and blocking access for people who have left.
  • Option to run in your Azure. When deployed in the client's environment, the entire portal sits inside the company's tenant, under your governance.

Where Active Hub is used

KPI portal for clients

Service, logistics, facilities and consulting firms give clients their contract KPIs, under the company's brand, instead of sending spreadsheets and PDFs.

Best whenYou need to report to clients with data on a recurring basis.

Franchise networks, branches and resellers

Each location tracks sales, targets and operations in the same report, seeing only its own numbers.

Best whenThere are many locations and each one may only see its own part.

Sales representatives and field sales teams

Sales reps track their portfolio, orders and commission without a Power BI license for each of them.

Best whenThe sales team is large, outsourced or spread across the country.

Suppliers and partners

Service level, inventory and delivery KPIs shared with people outside the company, with controlled access.

Best whenThe partner needs to see data but should not enter the company's Microsoft environment.

Analytics inside your product

Software companies and platforms offer reports to their own customers as part of the product.

Best whenBuilding a BI module from scratch doesn't make sense for your roadmap.

Multi-company groups

Holding companies and groups centralize reports from all companies, with access separated by company and by department.

Best whenEach group company has its own leadership and its own access rules.

We move your reports to the portal, and make them better than they are today

Migrating is more than publishing. We use the move to make reports faster, clearer and cheaper to run on capacity.

01

Inventory

We map the reports in use, who accesses each one and which are duplicated or abandoned.

02

Performance

We tune models and measures so they respond faster and consume less capacity, which directly affects cost.

03

Visuals and usability

We redesign screens for quick reading, in your brand's visual standard and with mobile in mind.

04

Publishing and access

We publish to Active Hub with groups, RLS and profiles configured and validated with the people who will use it.

Report and modeling projects follow the same methodology as our Power BI development consulting.

Already have a portal or system? We embed Power BI in it

If the company already has a client portal, an intranet or its own system, there is no need to replace it. We use the same Active Hub experience to embed Power BI Embedded reports in what already exists.

  • Reused login. Users sign in with the login they already use in your system, and we map that identity to Power BI RLS rules, with no duplicate user records.
  • Same security as Active Hub. Server-generated tokens, per-report access and isolation between clients.
  • Integration with your development team. We deliver the embedding layer and support your team in integrating it with the system's screens.

To understand Power BI Embedded in depth, see Power BI Embedded. To bring together reports, documents and routines for internal audiences, see Analytics Portals.

Two ways to engage

Monthly subscription

You use Active Hub as a service, for a monthly fee. Active BI hosts, maintains and evolves the portal. Power BI capacity is purchased by the company from Microsoft.

Best whenYou want to start quickly, without an infrastructure project.

Deployment in your environment

One-time fee to deploy Active Hub inside your company's Azure, under your governance. Power BI capacity also belongs to the company.

Best whenYour data policy requires everything to stay inside your tenant, or you prefer to own the solution as an asset.

In both models, we start with a licensing assessment: how many people create reports and how many only consume them, which capacity fits your usage and which strategies reduce cost, such as sizing to actual use and pausing capacity outside usage hours. See also Power BI Licensing.

How to get started

01

Assessment

We map who accesses which reports, the current licensing and cost, and recommend the right model and capacity.

02

Configuration

Capacity, login, groups, profiles and RLS rules configured for your scenario.

03

Publishing

The first report is usually in the portal within 3 days after the required access is granted.

04

Evolution

Migration of the remaining reports, new groups and clients and, when it makes sense, Active IA in the same portal.

Active Hub FAQ

What is Active Hub?
It is Active BI's Power BI Embedded portal: a ready-made application, branded for your company, that brings your Power BI reports together and delivers them to clients, partners and teams, with access groups, per-user data filtering (RLS) and corporate login. The integrations with the Power BI Embedded APIs are already built, so the project starts with configuration, not development.
Do clients and external users need a Power BI license?
Not to view reports through the portal. With Power BI Embedded, reports run on capacity purchased by the company, and people who access them through Active Hub need neither an individual license nor a Microsoft 365 guest invitation. People who create and publish reports still need a Power BI Pro license. During the assessment we confirm the right model for your scenario under Microsoft's rules.
What is RLS in Power BI?
RLS (Row-Level Security) is the feature that filters data based on who is signed in. With it, a single report serves everyone: a franchisee in one city sees only that city, a client sees only their contract and leadership sees everything. In Active Hub, the filter is applied on the Power BI server, not on the screen.
How much does Active Hub cost?
There are two models: a monthly subscription, in which Active BI hosts and maintains the portal, or deployment in the company's environment for a one-time fee. In both, Power BI capacity (Fabric or Embedded) is purchased by the company from Microsoft. Pricing depends on the number of users, clients and the capacity required, which is why we start with an assessment.
How does Active Hub help reduce licensing costs?
People who only view reports no longer need an individual license, and the cost becomes the capacity, sized to actual use. During the assessment we review who really needs a Pro license, the right capacity size, the option to pause capacity outside usage hours and report optimization to reduce consumption.
Does Active Hub support single sign-on (SSO)?
Yes. Internal users sign in with their corporate Microsoft account (Microsoft Entra ID), under the company's security policies, such as two-factor authentication. External clients and partners sign in through the portal itself.
We already have our own portal or system. Do we need to use Active Hub?
No. We can embed Power BI Embedded reports in the portal the company already has, reusing the existing login and mapping users to RLS rules, with the same security as Active Hub.
Do you help migrate reports to the portal?
Yes. We inventory the reports, tune models and measures for better performance and lower capacity consumption, improve visuals and usability, and publish to the portal with groups and RLS configured.

Find out how much your company can save on Power BI licenses

In the assessment we map who accesses the reports, the current licensing and the capacity required, and show you how to share with clients and external users while paying only for what you need.

  1. You describe your scenario in two quick steps
  2. A specialist replies within 30 minutes, during business hours (Brasília time)
  3. A 30-minute conversation to understand your scenario and recommend a path

No commitment and no sales call sequence.

Request a licensing assessment

2 steps, under 40 seconds

Step 1 of 2

A specialist replies within 30 minutes, during business hours (Brasília time).

or
Prefer to talk now? Message us on WhatsApp