Audience Feature - Ability extract a list of audience members across all apps for proper governance

[richard_appleto]

As the new audience feature is a game changer for managing content within an app to specific groups of users, the ability to have sight of all of these audience members for all apps across all workspaces is an absolute must for proper governance, especially when operating Power BI at scale for large organisations.

Currently we use AD groups to manage user access at scale, and we have sight of which AD groups have permissions across apps/workspaces/datasets, however with the introduction of audience it means that AD groups are now used in difference audiences. So to maintain proper governance we must be able to see which user has access to which audience(s), and having a function to extract/view this data is crucial. Otherwise it is a manual job to check who or which AD group is given permissions in an audience.

Please vote this idea so we can all benefit ASAP.

[RobBlay]

This would be welcome addition to the REST API metadata for "Apps GetAppUsersAsAdmin" as whilst it brings out a list of users against an app it is not possible to tell which audience it relates to.

There is also the complication of a user showing in the output twice if they have access to multiple audiences within an app.

I imagine it would need to be a separate REST API call which details the AppID, ReportID, AudienceID (plus name), and UserID

[Marcel_Davidse]

Agreed on the point that this will be very helpful from a governance perspective; especially at scale. Bumping for visibility

[Jonathan_Butler]

Why isn't this already there?

Don't they think we have to manage these environments? Who has time to clunk through every app and audience to get a list - what's this, 1982?

[acseagers]

Running into this exact problem! Bumping for visibility. 

As we change the way we handle workspaces and apps in our organization, this is a MUST for governance. Instead of including everyone in the workspace permissions, we are planning to split permissions based on role. Developers will have workspace access (inherited in app) and report readers will only have app access. We can further enhance our users' experiences and security with the audiences, but we don't have a way to track them... Please add this functionality! @fbcideas_migusr

[MonikaDl]

Hello, is it the similar idea over here? https://community.fabric.microsoft.com/t5/Issues/GetAppUsersAsAdmin-API-Audience-Support/idi-p/28336...

Shouldn't they be combined into one so we can have more votes?

I'm looking forward for this feature.