Anusha66
Advocate IV
9 months agoStatus:
New
Restrict Edit Access on Semantic Models for Report Developers
Currently, all report developers who build reports from a semantic model in Microsoft Fabric require Edit Access to the model. Without this permission, they cannot create reports, as the option is unavailable.
This approach poses challenges, especially with Direct Lake models, where data resides in Fabric itself. In many scenarios, organizations may have one large semantic model serving multiple developers. Granting edit access to all report developers introduces risks such as accidental changes to the model, governance issues, and lack of isolation between roles.
Proposed Enhancement:
- Introduce role separation:
- Semantic Model Developer: Full edit access to manage model structure, measures, and relationships.
- Power BI Report Developer: Ability to create reports from the semantic model without requiring edit permissions on the model itself.
This change will improve security, governance, and collaboration in environments where multiple developers work on shared models.
No CommentsBe the first to comment
Recent ideas
Custom visuals: allow same-tab navigation & reduce confirm-navigation friction for trusted links
Description: Custom visuals (e.g. Deneb) that trigger navigation via href currently have two limitations that create friction for legitimate, author-controlled use cases: Links always open in a ne...AlexSenEON1 hour agoNew MemberNew5Views0likes0CommentsSeparate Download and Publish Permissions for Power BI Workspaces
Idea / Feature Request Introduce more granular permissions in Power BI to independently control report download and report publishing permissions at the workspace level. Business Scenario We have ...ewarstdhyjugkhi3 hours agoMicrosoft EmployeeNew20Views8likes0CommentsSupport Fabric SQL Database with workspace-level inbound Private Link
Fabric SQL Database supports tenant-level Private Link but not workspace-level Private Link. Securing a small number of databases therefore requires enabling Private Link across the entire tenant, in...WorkFull224 hours agoAdvocate INew31Views1like1Comment