Confine User to Workspace App

[carlol]

Hi 

I have a workspace app , it will be rolled out to external users 

I will provide the Users with a link to the app 

Is it possible to restrict users to just using the app , I do not want to allow them into the PowerBI home area , to have access to "myworkspace" , generally poking around and asking for access to items they are not allowed, as far as I can see I cannot stop them seeing items exist (i.e. datasets) , still does not stop them clicking on things     

[andres777]

Create a user group only for the App, and they will not be able to even see the Workspace...
One of the best benefits of Apps is that the content is Read Only,
so Nobody can make changes, except for Owners and Admin. Keeping it safe.

Power BI App is an interface that allows you to List/Organize finalized reports you would like your users to run, it also allows you to include Paginated Reports (+SSRS) and other documents like PowerPoint, web links and Videos, The final interface will look cleaner and it's safer, as all users will have read-only rights.

The dashboard was meant for consolidating Power BI graphical dashboards Tiles in one report, which can come handy to display summaries from multiple dashboards.
It does not handle Paginated Reports. So 2 different uses... That's how we are using them in our corporation for 2500 users.
update ...
This option is coming to the Power BI solution, I've seen efforts from MS to integrate the two types of reports dashboards and Paginated Reports...

Workspaces vs PowerBI App...
My Power BI Analogy : think of it as when you visit a restaurant...
  Workspace     = Kitchen Area (messy, not pretty, very loud... where developers work)
  Power BI App = Restaurant Sitting Area (Pretty, safe, good music, better experience to consume the final product)

[edhans]

Don't add report users to the workspace at all. Just add them to the app. They can see the reports via the app, and if you give them build permission to the datasets through the app, they can use Analyze in Excel. Your option. But they will have NO access to the workspace.

You cannot block "my workspace" unfortunately. That is a feature that cannot be disabled.

[carlol · Accepted solution]

Thanks 

I have it setup only app access , no build permissions 

What concerns me is , even though a user cannot access the workspace with the assoicated datasets, pbix files , in the app they can click on see related content or view dataset

When view dataset is clicked , it will display cannot find but lands the user in the OneLake Data hub , allows them to add data via a manual paste 

As far as I can see , no way of disabling it , if I user knows it exists they will contact me for access , I want to prevent the addional workload

I want a power bi embedded experience , Users only see the front end , apply the principle of least privileage 

[edhans]

Yeah, you cannot block users from doing their own exploration. If you want an embedded experience, then you will have to set that up. Microsoft wants users to use Power BI and the rest of the Fabric experience, which is one reason you cannot turn off My Workspace. You similarly cannot block all other Power BI content, just like you cannot block Excel in an Office 365 tenant.

So either set up an embedded app, or work iwht  your governance team to set up ground rules for your teammates.