Allow user to see all reports in the organization

[Anonymous]

Hello,

My organization has a lot of workspaces and reports.

I need to be able to give the CEO access to everything without giving him permission to edit,
and without the need to go to each workspace to give access.

Though if it can be done only with edit permission too, it's ok.

[TomMartens · Accepted solution]

Hey @Anonymous ,

unfortunately, someone has to go through all workspaces.

But this someone can be a PowerShell script.

Basically you need these REST API calls

• https://learn.microsoft.com/en-us/rest/api/power-bi/admin/groups-get-group-as-admin
  This returns a list of all workspaces
• https://learn.microsoft.com/en-us/rest/api/power-bi/groups/add-group-user
  Adds a user or group to a workspace

To prevent editing the new user must assigned the Viewer permission (groupUserAccessRight).

You have to be aware that the user or the member of the groups needs to have a Pro license when the workspaces are not backed by Premium Per Capacity (P[x] capacities). If the workspaces are backed by Premium Per User capacities, then the user(s) must have a Premium Per User licensc.

Hopefully, this provides you with some ideas on how to tackle your challenge.

Regards,

Tom

[Anonymous]

@TomMartens Thank you for your response, well it is what it is then. 

[Greg_Deckler]

@Anonymous I don't know of a solution to do that other than perhaps using the Power BI REST API via PowerShell to add the CEO to the Viewers role for each workspace. You should be able to automate that via the REST API to grab all workspaces in the tenant and then add the user to the Viewers role.