Tenant Admin Edition, One-Click

The Problem

The core Impact IQ solution runs for anyone and works anywhere you’re a Contributor or higher. But even if you’re a Tenant Admin, that doesn’t mean you’re actually a Contributor in every workspace.

Yes - the Admin APIs let you list every workspace, report, dataset, and dataflow in the tenant.

What they don’t let you do:

• Export reports

• Back up semantic models

• Extract full model metadata

• Pull visual-level details

For that, you still need to actually be part of the workspace with the right role.

So you end up in this awkward middle ground:

• You can see everything at a high level.

• But you can’t fully back it up.

• You can’t run deep extraction everywhere.

• And manually adding yourself to every workspace isn’t scalable (or safe).

What This Version Does

The Tenant Admin Edition closes that gap. When you run it in full tenant mode, it:

• Uses Admin APIs to grab all workspaces

• Temporarily grants Admin access where needed

• Performs full report, model, and dataflow backups

• Extracts complete metadata (including visual-level impact)

• Pulls all permissions across workspaces and artifacts

• Automatically removes the temporary access when it’s done

If something fails mid-run, it outputs a clean list of any temporary permission grants so you can remove them safely through an included script.

Why it Matters

This lets you:

• Run true tenant-wide backups

• Do deep impact analysis across workspaces

• See who has access to what (fully visualized)

• Avoid permanent elevation or long-lived admin membership

It’s full-tenant extraction - without permanently making yourself a member of everything.

(As always, this is free and open source - just a new iteration of a passion project starting nearly 2 1/2 years ago).

Direct link to repo: https://github.com/BeSmarterWithData/ImpactIQ-TenantAdmin

Website that highlights every edition: www.besmarterwithdata.com

Fun fact: this edition even works for non-tenant admins - it just won't give you the tenant admin options and runs the same as the core version (it does an initial Admin API call to determine if you are a Tenant Admin).