Forum Discussion
Org App doesn't grant semantic model access although report and model are in the same workspace
Hi P108 , Thanks for the clarification. If users can fully open and interact with the reports in the Org App without any errors, then Power BI is already providing the required access for report consumption, even if explicit permissions are not visible on the underlying semantic model itself.
However, if reports or visuals are failing with semantic model access errors, then the deployment pipeline/Git deployment detail could be relevant, especially if the reports and semantic model were deployed or rebound separately.
If that is the case, please verify that the app was republished after deployment and confirm the reports are still correctly connected to the semantic model in the target workspace. Also check whether any RLS roles or composite/chained semantic models are involved.
Super UserThis is actually expected behavior with Org Apps. Granting users access to the app gives them implicit Read on the underlying semantic model only for the queries served through the report visuals in the app. It does not grant Build, which is why anything that needs to talk to the model directly fails (Analyze in Excel, building a new report on top of the model, XMLA endpoint access, copying the report, etc).
The clean fix without re-sharing the workspace is in Manage app. Open Manage app, go to the Audience tab, expand the audience and find the dataset / semantic model permissions, and turn on "Allow recipients to build content with the data associated with this app". Then republish. After republish, the audience gets Build on the model alongside the app.
If you only want a subset of users to build, skip the app setting and grant Build directly on the semantic model from its workspace (Manage permissions on the model). Either path gives them what they are missing now. App audience changes only take effect after republishing, so any change there must be followed by Update app.
If this helped, a thumbs up and accepting the solution would be appreciated.
Best regards,
Shai Karmani