Grant/Deny Access to Specific Reports in Workspace

[Anonymous]

Is there a way to grant/deny access to specific users / roles by individual Reports in a workspace? Some members of a workspace need access to Report A, while others need access to Report B, etc.

Any thoughts?

Thanks,

Jonathan

[Greg_Deckler]

Within a workspace, you can share out an individual report within the workspace to specific users. They have access to that report and that report only within the workspace. But, they cannot be members of the workspace.

[Anonymous]

@Greg_Deckler,
Thanks. How do you add users to a specific report, without also adding them to the workspace? I thought users had to be added to the workspace to see any report in that workspace?

Jonathan

[Anonymous]

It's a very good question that MS don't seem to feel they need to explain clearly. Not like security is important or anything 

[Greg_Deckler · Accepted solution]

No, we are doing this right now. In one example there are only 3 owners of the workspace and about 6 or 7 reports. One of the reports has about 20 people with read access but they do not see the other reports. So, in your workspace, navigate to your report and click the "Share" in the upper right. That's it. Those users will be able to see that report but not the other reports in the workspace. If you add them to the workspace, then they can see all the reports in that workspace.

[Srini1855]

When we share report , do they have edit access? if not how can we give edit access to single report in a workspace?

Thanks .

[Anonymous]

@Greg_Deckler, Good to know.

Thanks.

[Atlsql]

Two options I can think of:

1.  Use RLS to ensure that people that shouldn't view reports, meet with a blank data set when attempting to view the reports they aren't supposed to.

2.  Alternatively, you could also create a series of Aps and grant permissions on the Ap, instead of on the Workspace to allow the required users to see the required reports.   You'd have to be selective 

(As I think about it option 2 is probably easier, if you have the luxury of preventing access to the Workspace).

Mike

[Anonymous]

@Atlsql,

Thanks. I like #1, even thought it might be a minor pain to add a generic "admin" role and grant those that should have access to the report to it and leave the others in the workspace, but out of the role...so they'd see a blank report...I guess I was just hoping for a way to hide the report from them completely...rather than just encounter a blank one, perhaps that was your point in #2, but I haven't worked with Apps at all..

Jonathan