Forum Discussion
Helper IControl PBI in a large organisation
Hello, I work in a large organisation that has Office 365 E5 for all employees which means they have Power BI Pro.
My team has encounter an intresting scenario that can happen with Power BI and not with Qlik. In Qlik we can decide who can build reports and distrubute them. However with PBI when everyone has Power BI Pro anyone can build and distrubute reports. Some managers obtain data from data sources in excel files and build PBI reports and distrubute them
Other managers that are more technically an have a database user to their for example CRM system, theyobtain data with setting up a connection to the data source directly.
We as developers use a SQL Server where we obtain data using SSIS. We would like to get better control of the managers that build and distribute their own reports. We don't want to connect all systems in the organization to SSIS and our Microsoft SQL to have total control, we still want people to have freedom to build and distribute reports. However we need better control of how distribute what to who. What we need is some middle ground between the two extreams.
Have anyone encounter a similar situation or does anyone have any suggestions. I appreciate all input!
As far as I'm aware you can't lock down My Workspaces. Hence needing to do it via company policy.
It won't automatically delete old workspaces. As Fabric Tennant admin though if you go into Tennant settings you can see all workspaces and delete/take control (including my workspaces).
3 Replies
- bcdobbs
Community Champion
I'd have a look through the power bi tennant settings. Specifically lock down to a security group who can create workspaces. Create workspaces and grant permissions on them for trusted report authors who work within your guidelines. You may have to "purge" older stuff outside of agreed setup. That way any reports are in known workspaces.
We also use another setting that reminds those publishing from desktop of company policy (literally can set any custom message). Ours state that reports must not be share from My Workspaces.
MSchultz93Thank you, that's a very nice solution!
If I lock down the tenant with the following 2 settings.
1. Lock so people cannot share report from "My Workspace"
2. Lock the tenant, so regular users cannot create workspaces. Create a security group that can create workspaces.
Will old workspaces created mangers automatically be deleted or will they still exist?
If a security group user create a workspace, how do I get access to the workspace. I guess I don't get automatically access but the "trusted user" needs to invite me? How do you do deal with that? Or do you set up guidelines that a "trusted user" must invite a developer to the new workspace?
- bcdobbs
As far as I'm aware you can't lock down My Workspaces. Hence needing to do it via company policy.
It won't automatically delete old workspaces. As Fabric Tennant admin though if you go into Tennant settings you can see all workspaces and delete/take control (including my workspaces).