Build rights on self service semantic models

[Maaike_zeevalk]

Hi!

We have a few semantic models used for self service purposes. People in our organisation use these models to build ad hoc reports for themselves and their team. 

Our plan is to place these models in a (premium capacity) workspace and use the following permissions:

- Add a wide group as viewer to the workspace. (so they can view the reports build by the self service builders)

- Give all self service builders build permissions on selected semantic models via manage permissons. 

We expected the wide group to see an empty workspace, but be able to view reports. This works.

We also expected the self service builders to see all semantic models where build permissons are enabled. But they also see an empty workspace and are unable to find the semantic models in power BI desktop.

The setting 'use datasets across workspaces' is enabled for the entire organization. 

Is this by design or is there some setting we missed?

[v-fenling-msft]

Hi, @Maaike_zeevalk 

In your description, the workspace role you assign to wide group is Viewer. but you need to make sure that self service builders are assigned the appropriate role in the workspace: they should at least be Contributor so that they can build reports.
Build permission for shared semantic models - Power BI | Microsoft Learn

I hope my suggestions give you good ideas, if you have any more questions, please clarify in a follow-up reply.
Best Regards,
Fen Ling,
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[collinq]

Hi @Maaike_zeevalk ,

When you state that you gave them "builder" rights did you give them "Contributor" rights in the Workspace?  To get the ability to see the semantic models in the workspace they would need Contributor.

If you are using the specific build permission, make sure that you are using "Direct Access" and not "links" when you are granting the access.  If you use "links" then the user can only access that semantic model with the link provided.

[Maaike_zeevalk]

Hi!

We gave them the direct build permission via direct access. The users are not contributors, because we don't want them to edit the workspace. 

We discovered the users are able to connect with the model using desktop, but they are still not visible in the workspace. Is that how it's supposed to work?

[collinq · Accepted solution]

Hey @Maaike_zeevalk ,

Yes, I believe that is correct, because the permissions for direct access are for the semantic model BUT the ability to see something inside the workspace is based on the permissions for the workspace - not for the items in the workspace.