Read-only API for Power BI usage and audit data without requiring tenant admin roles
π¦ Request Summary
Provide a supported, least-privilege API or role to access Power BI usage and audit data (user, report, workspace, timestamp, etc...) without requiring tenant-wide admin roles, enabling secure and automated governance, analytics, and compliance reporting.
π¦ Background & Business Need
Need to analyze Power BI usage and adoption for governance, cost optimization, security auditing, and compliance purposes.
Typical requirements include understanding:
- Who accessed which Power BI report
- When the access occurred
- Which workspace and dataset were involved
- What type of connection was used (Import, DirectQuery, Live, AS)
Currently, the Power BI Activity Events API is the only supported source that provides this level of detail. However, accessing this API requires assigning Power BI Service Administrator or Fabric Administrator roles to the calling identity (user or service principal).
In many enterprises, especially those with:
- Strict security controls
- Segregation-of-duties policies
- Internal and external audit requirements
- Regulated environments (finance, healthcare, government)
granting tenant-wide admin roles to automation identities or analytics teams is not acceptable, even for read-only reporting purposes.
As a result, organizations face a difficult trade-off between:
- Achieving visibility into Power BI usage, or
- Maintaining least-privilege and compliance standards
This challenge is common across organizations of all sizes and industries.
π¦ Expected Benefits
Introducing a read-only, least-privilege access model for Power BI usage data would deliver significant benefits:
- β Enables secure, automated usage and adoption analytics
- β Reduces need for broad tenant admin role assignments
- β Aligns with enterprise security and compliance best practices
- β Improves governance, capacity planning, and cost management
- β Supports audit and monitoring requirements without elevated risk
- β Benefits all customers, from small tenants to large regulated enterprises
Such an enhancement would allow customers to fully leverage Power BI and Fabric telemetry while maintaining strong security boundaries, and would encourage broader adoption of Microsoft-recommended governance practices.
Recent ideas
Justification Prompts When Downgrading or Removing Sensitivity Labels in Power BI Desktop
Description Currently, organizations can configure Microsoft Purview sensitivity label policies to require users to provide a justification when removing a label or lowering its classification. T...vvargasv2 hours agoMicrosoft EmployeeNew3Views0likes0CommentsMatrix: column totals as a bar chart docked to the edge
What's missing Data bars already work on the Total row and column through conditional formatting, so row totals can be read as length. Column totals cannot: they render as a horizontal bar inside a ...Sayurivalente4 hours agoRegular VisitorNew77Views6likes1CommentAllow Bookmarks to Affect Multiple Report Pages
Description: I would like to request the ability for a single Power BI bookmark to affect and maintain a state across multiple report pages, rather than being limited to a single page. For example,...Josegonzalez214 hours agoNew MemberNew18Views4likes1CommentFeature Proposal: Expandable/Collapsible Page Sections for Reports on Same Semantic Model
Subject: Feature Proposal: Expandable/Collapsible Page Sections for Reports Using the Same Semantic Model Dear Microsoft Power BI Team, I would like to propose an enhancement to the Power BI report...Dr7awb4 hours agoNew MemberNew29Views1like1Comment