Solved: Restrict publishing to workspace

BoNDoK00 · ‎12-05-2022

I am creating a process for power bi development for a group of developers. The processes includes CD (Continuous Deployment).

Development process should be like:

1. Create a branch, and download the pbix to work on.

2. Do the changes.

3. Commit to branch, and create pull request.

4. Changes added to main branch.

5. Step 4 triggers build and deploy pipelines.

6. Report is published to the workspace.

How can I make sure that developers don't take shortcuts and deploy directly to the workspace?

One option could be to read activities and check for CreateReport event, but this option is not robust enough.

Thank you

v-yiruan-msft · ‎12-06-2022

Hi @BoNDoK00 ,

You can restrict that only the certain people can publish the reports to the workspace, please review every role's permissions in the following documentation.

Workspace roles

In addition, you can refer the following links to make version control for the PBI files.

Version Control with OneDrive, Teams and SharePoint Online

Power BI Version Control – Ready to use solution

Version control for Power BI files

Setting up Version Control for my Power BI Desktop Files (PBIX) with no additional Cost

Best Regards

Community Support Team _ Rena
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

BoNDoK00 · ‎12-12-2022

To start Power BI governance using DevOps repositories and pipelines, I couldn't find a way to restrict publication on certain workspaces, other than giving them only viewer access to workspaces.

And given that this is not a solution for me, I will proceed with:

1. Communicating to developers that report publication should only be done through DevOps pipelines,

2. Monitoring power BI Activities to make sure developers are not publishing any reports to certain workspaces.