Group Workspace Permissions

This is an important feature when IT department want to be the only one with Admin rights (to secure correct user Groups and WS settings) but still enable Business content owners need to prepare and work with content. While main users are for consumption only (i.e. Read).

Absolutely!!! Right now we are hesitant using PowerBI to publish to the cloud. Users with "Edit" privledges in a work space have way too many privledges. Having a granularity where something like "reports" can be set to r/o for some and r/w for others would be necessary. Otherwise users can edit and delete any report they wish. Plus, there's no "Restore" functionality so important changes or work done by a user is potentially lost forever. Not good in an enterprise environment.

Yep, this! We are now embedding some reports in a workspace to sharepoint and the customer wants its users to be able to download the PBIX if they want to. This is not possible if the workspace is set to members can read only, and the alternative is that everyone can download...but also overwrite official reports, and thats the biggest problem.

One possible way to implement this using existing O365 group structure would be an option to only allow group Owners to edit.

Over the weekend I saw that this was indeed enabled via O365 group owners/members. You need to edit your workspace from within PowerBI service, where you can set members to view only or modify content. It wasn't exactly the most intuitive to find, but it makes sense.

With the upcoming move of App Workspaces away from O365 groups, this needs to be a key part of the update. It feels like they wanted to empower users, but wound up giving too much power to far too many, and then made us go further by requiring pro licenses to view shared content. These governance issues need to be addressed as a matter of priority.

just downloaded PBI, but cannot see workspace