Build permission on semantic model does not allow user to use semantic model in Power BI desktop

[KimTutein]

I have a problem with granting build access on my semantic model which I find rather strange. I have a workspace with a semantic model which uses direct lake on a lakehouse. If I grant user viewer right on the workspace and grant Build permission on the semantic model my users still cannot see the semantic model as a source in Power BI desktop. They can however use the semantic model directly in Excel. If they use an Internet browser they cannot see the semantic model either. At first, I thought it might be due to some permission on the lakehouse (they have Read and ViewOutput) but adding ReadAll did not help. The only way they seem to be able to build a report on the semantic model if I grant then “contributer” on the workspace. I do not want to grant that right as they would be able to change the semantic model itself – I only want these users to be able to build Power BI reports on top of the model or analyaze using Excel.

I strongly suspect I am just missing some detail but cannot figure out what the problem is - any input would be highly appreciated.

[KimTutein]

Hi @Poojara_D12 

Just a follow up for you and potential others in the community reading this post.

For now I am not able to get a test user due to internal company policies which makes it very difficult for me to test security. However I reproduced the problem yet another time and made a ticket to support. They have been able to reproduce the same behavior (not being able to see semantic model if you do not have contributor permission on the workspace). They have told me that this is how the product works. I have voiced me concern that we then really have not core way of giving just read access to a semantic model which is worring for me. As I see it the only way to give pure read is to make a workspace with a lakehouse reference a “core” lakehouse via. shortcuts (I would think that giving contributor right to a lakehouse would mean granting write to that lakehouse as well – I have not checked up on this but a concern of mine)

Regards

Kim

[KimTutein]

Hi @Poojara_D12 

Thank you for your reply it is much appreciated.

I have triple checked that the User has view role on the workspace and Build permission (I am not trying directly on the user so not even via. a group). He also have Read and ViewOutput. He can however not see data set in “Get Data” => “Power Bi Dataset” in either Power BI Desktop or Excel and not in the Data Bub either. If I connect the semantic link in a Excel workbook and send it to him he is able to use the Excel spreadsheet and pivot the semantic model.

Anything else you can come up with I should try out?

[Poojara_D12 · Accepted solution]

Hi @KimTutein 

If the user has the correct permissions but still cannot see the dataset in Power BI Desktop or Data Hub, try the following steps:

1. Ask the user to clear their Power BI Desktop cache:

   • Go to File > Options and Settings > Options > Diagnostics > Clear Cache.

2. Ensure the dataset isn't hidden from the Data Hub:

   • In the Power BI Service, go to the dataset settings and check that Featured in Apps or Certify/Promote options are enabled for better visibility.

3. Confirm that your Power BI admin tenant settings allow external connections like Analyze in Excel and viewing datasets.

4. Create a test user with identical permissions to replicate the issue. If it persists, there might be a bug.

5. Revoke and reapply Viewer and Build permissions to refresh the user's access.

• If none of these work, it could be a backend issue—reach out to Microsoft Support for further assistance.

Did I answer your question? Mark my post as a solution, this will help others!

If my response(s) assisted you in any way, don't forget to drop me a "Kudos" 🙂

Kind Regards,
Poojara
Data Analyst | MSBI Developer | Power BI Consultant
Please Subscribe my YouTube for Beginners/Advance Concepts: https://youtube.com/@biconcepts?si=04iw9SYI2HN80HKS 

[KimTutein]

Thansk @Poojara_D12 

I will try it out - thank you for guidance.

[Poojara_D12]

Hi @KimTutein 

1. Ensure users have Viewer role on the workspace and Build permission on the semantic model.
2. Confirm they have Read and ViewOutput permissions on the Lakehouse.
3. Ensure they sign in correctly to see the dataset in Get Data > Power BI Datasets.
4. Check the dataset in the Data Hub; it shouldn't be hidden.

No need for Contributor access.

Did I answer your question? Mark my post as a solution, this will help others!

If my response(s) assisted you in any way, don't forget to drop me a "Kudos" 🙂

Kind Regards,
Poojara
Data Analyst | MSBI Developer | Power BI Consultant
Please Subscribe my YouTube for Beginners/Advance Concepts: https://youtube.com/@biconcepts?si=04iw9SYI2HN80HKS