Auditing report/dashboard access without Tenant / Power BI Admin access

[DavidFrohlich]

Hello,

I've been given a requirement to programatically audit access and  to reports & dashboards across multiple workspaces in PBI Service. However, I don't have administrator access to Power BI, and only Member access on the workspaces. With the API I can pull the list of Users/Groups given with access to the workspaces as well as their roles, but there are some gaps to getting a complete picture of permissions. Is there non-admin API that will provide:

• Users/Groups with direct access to a report in a workspace
  • We don't typically allow sharing, but the ability to list users/groups with access via Links and Sharing is needed
• Details of the "Application" created on top of the workspace including
  • Every audience created in the application
  • The reports that are visible to that audience
  • The users/groups assigned to that audience

 Thanks!

[v-hashadapu]

Hi @DavidFrohlich, Just wanted to know if your is solved, if it is, please consider marking the answer 'Accept as Solution', If not, please share the details.
Thank you.

[v-hashadapu]

Hi @DavidFrohlich, Just wanted to know if your is solved, if it is, please consider marking the answer 'Accept as Solution', If not, please share the details.
Thank you.

[v-hashadapu]

Hi @DavidFrohlich, Just wanted to know if your is solved, if it is, please consider marking the answer 'Accept as Solution', If not, please share the details.
Thank you.

[v-hashadapu]

Hi @DavidFrohlich , thank you for reaching out to the Microsoft Fabric Community Forum.

Thank you @GilbertQ  for providing the appropriate answer.

I would like to add something though, while it is true that some of the information you are seeking (e.g., audit logs, sharing details, and application audience details) is more easily accessible to Power BI administrators, there are still ways to gather some of the required information programmatically using the Power BI REST API, even without admin access. However, there are limitations to what you can achieve with only Member access to the workspaces.

What you can do with Member Access:

1. You can use the Get Groups users API (https://learn.microsoft.com/en-us/rest/api/power-bi/groups/get-group-users) to retrieve the list of users and groups with access to a specific workspace, along with their roles (Admin, Member, Contributor, Viewer).
2. You can use the Get Reports API (https://learn.microsoft.com/en-us/rest/api/power-bi/reports/get-reports) to retrieve a list of reports in a workspace.
3. You can use the Get Dashboards API (https://learn.microsoft.com/en-us/rest/api/power-bi/dashboards/get-dashboards) to retrieve a list of dashboards in a workspace.
4. You can use the Get Datasets API (https://learn.microsoft.com/en-us/rest/api/power-bi/datasets/get-datasets) to retrieve a list of datasets in a workspace.

If this helps, please consider marking it 'Accept as Solution' so others with similar queries may find it more easily. If not, please share the details.
Thank you.

[GilbertQ · Accepted solution]

Hi @DavidFrohlich 

I'm going to highly recommend chatting to your power BI administrator and asking them to get the audit logs. This will give you all the information that you require as unfortunately what you are looking to do with some of your requirements can only be done with the admin settings.