Auditing who has access to the workspaces and Apps in PowerBI Service

[hs28]

Hi,

We share PowerBI reports via security groups. I am trying to get an overview (ideally a report/PowerBI report) of which security groups have access to which workspaces and/or Apps. In addition, we have RLS set up for different reports (also via security groups), so additional information about RLS needs to be included. 
I tried to set it up from Access Right Manager (as this is how we create the security groups) but it was apparently not possible to have PowerBI Service as a resource in Access Right Manager. 
Any tips would be appreciated. Thanks

[ibarrau]

Hi. I think the Power Bi Rest API can help. You can get request of the users involved with any artifact (workspaces, apps, etc). This can be requested with the Admin section.

https://learn.microsoft.com/en-us/rest/api/power-bi/admin

There are libraries to help you with that like SimplePBI with python or cmdlets for PowerShell.

Sadly RLS is something that is not supported yet. There is no API endpoint to get information about that. However I think if you have built a dynamic rls, you probably have a table for that at the database to check roles.

You can also find useful data like activity logs for each operation a user did the last 30 days.

I hope that helps,