Forum Discussion
Confine User to Workspace App
Thanks
I have it setup only app access , no build permissions
What concerns me is , even though a user cannot access the workspace with the assoicated datasets, pbix files , in the app they can click on see related content or view dataset
When view dataset is clicked , it will display cannot find but lands the user in the OneLake Data hub , allows them to add data via a manual paste
As far as I can see , no way of disabling it , if I user knows it exists they will contact me for access , I want to prevent the addional workload
I want a power bi embedded experience , Users only see the front end , apply the principle of least privileage
Don't add report users to the workspace at all. Just add them to the app. They can see the reports via the app, and if you give them build permission to the datasets through the app, they can use Analyze in Excel. Your option. But they will have NO access to the workspace.
You cannot block "my workspace" unfortunately. That is a feature that cannot be disabled.
Thanks
I have it setup only app access , no build permissions
What concerns me is , even though a user cannot access the workspace with the assoicated datasets, pbix files , in the app they can click on see related content or view dataset
When view dataset is clicked , it will display cannot find but lands the user in the OneLake Data hub , allows them to add data via a manual paste
As far as I can see , no way of disabling it , if I user knows it exists they will contact me for access , I want to prevent the addional workload
I want a power bi embedded experience , Users only see the front end , apply the principle of least privileage
Yeah, you cannot block users from doing their own exploration. If you want an embedded experience, then you will have to set that up. Microsoft wants users to use Power BI and the rest of the Fabric experience, which is one reason you cannot turn off My Workspace. You similarly cannot block all other Power BI content, just like you cannot block Excel in an Office 365 tenant.
So either set up an embedded app, or work iwht your governance team to set up ground rules for your teammates.