Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Join us at FabCon Vienna from September 15-18, 2025, for the ultimate Fabric, Power BI, SQL, and AI community-led learning event. Save €200 with code FABCOMM. Get registered

Power BI Global Admin

As an IT administrator I need a way to see all content (datasets, reports, dashboards) that has been created and shared across the entire online tenant. This is needed to be able to support content after employees leave the organization as well as to support our SOX auditing practices.
Status: Needs Votes
Comments
nishalit
New Member
moving to back log for the team
Martin_Kmec
New Member
Part of what you are asking for could be covered by: 1. https://docs.microsoft.com/en-us/rest/api/power-bi/admin/groups_getgroupsasadmin - this will give you overview of all artifacts in your tenant. 2. Azure Purview - can scan your tenant and provide you lineage between various artifacts 3. If you are using modern workspaces, and you have Power BI Administrator role in Azure AD, then you can give yourself access to any modern workspace via the Admin portal > Workspaces.
fbcideas_migusr
New Member

We created a Service Principal and an "Admin" group Azure AD for this purpose. We had workspaces in place before we really started to manage them, so we needed to do some cleanup. Using PowerShell, we looped through every workspace as the Service Principal, which added itself, added the admin group, then removed itself. We also removed everyone's ability to create a workspace at will, and limited it to that same group. We have a request process for new workspaces and we make sure that the admin account is on ALL new workspaces. (We do have the occasional exception where we have opted to not be in a workspace due to it's sensitivity. We'll only go into the workspace on an as needed basis, and we just add the group through the admin portal.)


While this workaround might be of use to others, like it was for us, having a definite way to accomplish similar without resorting to a loop in PowerShell would be better.

fbcideas_migusr
New Member
Status changed to: Needs Votes