I'm trying to avoid listing specific individuals as workspace admins. But when I enter a Mail-enabled security group as the only workspace admin, the workspace becomes orphaned. Do I need to use a different type of security group?

I don't think Microsoft had anticipated your usage scenario. Assuming you have a Pro license you can consider raising a Pro ticket at https://powerbi.microsoft.com/en-us/support/pro/

It sounds like they're describing my scenario here: https://docs.microsoft.com/en-us/power-bi/collaborate-share/service-new-workspaces Use more granular workspace roles for more flexible permissions management in the new workspaces. In classic workspaces, you can add only individuals to the members and admin lists.Assign user groups to workspace roles: In the new workspaces, you can add multiple Active Directory security groups, distribution lists, or Microsoft 365 groups to these roles, for easier user management.

Thanks for this additional confirmation, v-zhangti . So, in a use case where I want to use a group to admin a workspace (so I don't have to worry about individual staff turnover on our reporting team), there's really no point; I may as well list the members of my team individually if I want them to be able to admin a workspace.

this is happening on V2 workspaces? Shared or premium?

Yes, V2 workspace, Premium per capacity. I'm a member of the mail-enabled security group I'm trying to use as an admin, so I can still get in and modify access settings after removing my individual account from those settings, but the service is telling me my workspace is orphaned.

Orphaned workspaces and mail-enabled security group admins

11 Replies

lbendlin
Super User
4 years ago
this is happening on V2 workspaces? Shared or premium?
- MarkPalmberg
  Kudo Commander
  4 years ago
  Yes, V2 workspace, Premium per capacity. I'm a member of the mail-enabled security group I'm trying to use as an admin, so I can still get in and modify access settings after removing my individual account from those settings, but the service is telling me my workspace is orphaned.
  - lbendlin
    Super User
    4 years ago
    I don't think Microsoft had anticipated your usage scenario. Assuming you have a Pro license you can consider raising a Pro ticket at https://powerbi.microsoft.com/en-us/support/pro/
lbendlin
Super User
4 years ago
Nice. Even more reason to raise the ticket if the documentation doesn't match your reality.
- MarkPalmberg
  Kudo Commander
  4 years ago
  Thank you, lbendlin , for taking the time to reply! I appreciate it.
v-zhangti
Community Support
4 years ago
Hi, MarkPalmberg

After testing, the workspace becomes Orphaned when the group is listed as the only administrator. It is possible to have at least one member of the group as an administrator at the same time, which is the Active state.

Best Regards,

Community Support Team _Charlotte

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
- MarkPalmberg
  Kudo Commander
  4 years ago
  Thanks for this additional confirmation, v-zhangti . So, in a use case where I want to use a group to admin a workspace (so I don't have to worry about individual staff turnover on our reporting team), there's really no point; I may as well list the members of my team individually if I want them to be able to admin a workspace.
  - v-zhangti
    Community Support
    4 years ago
    Hi, MarkPalmberg
    
    You can set up a fixed administrator for managing the workspace. On top of that, it is perfectly fine to add other groups as administrators or members.
    
    Best Regards,
    
    Community Support Team _Charlotte
    
    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Forum Discussion

Orphaned workspaces and mail-enabled security group admins

11 Replies

Related content

orphaned workspaces with API

Add mail enabled security group to datasource programatically

PowerBI Workspaces

Workspace Role

Dealing with orphaned items in deployment pipeline stage