Power BI Apps - Audience seems not enough & Power BI REST API doesn't support direct read assignment

Thankyou, TomMartens, for your response.

Hi lachicazul,

Thank you for your inquiry on the Microsoft Fabric Community Forum.

Based on my understanding, when a report is redeployed through CI/CD (for example, using the REST API or import), the report object is frequently recreated or updated in a manner that causes item level Read or Reshare permissions on the report to be lost. At present, Microsoft does not offer a fully supported REST API that reliably sets persistent per report Read or Reshare permissions which remain after a replacement. Consequently, the report level Read assignment may be removed after publishing.

Please follow the steps below, which may help resolve the issue:

1. Grant the AAD group the Viewer role on the reporting workspace so users can always see the reports and the app. Alternatively, use the App Audiences feature when publishing the app (add your group as an audience). This ensures that audience access remains intact even when a report is redeployed.
2. Grant the authors or Power BI report authors the Build permission on the dataset or semantic model in the semantic models workspace. Consumers of the app generally do not require Build, they typically need only View access via the app or workspace.

For further reference, please see the links below:
Build Permission for Shared Semantic Models - Power BI | Microsoft Learn
Groups - Add Group User - REST API (Power BI Power BI REST APIs) | Microsoft Learn
Publish an app in Power BI - Power BI | Microsoft Learn
Reports - Update Report Content In Group - REST API (Power BI Power BI REST APIs) | Microsoft Learn

We hope the information provided helps to resolve your issue. If you have any further queries, please feel free to contact the Microsoft Fabric community.

Thank you.