DataFlow Security in Power BI Service

[Anonymous]

Hi,

We would like to create few dataflows and give access to those Datasets (Not DataFlows) to users so that they can't add any more dataflows Or Can't connect to our sources. Is there any way to strict users to NOT to create their own DataFlows or Edit existing Dataflows Or Infact not even see the Dataflow option on the workspace ?.

Thanks,

[jeffshieldsdev]

There is not.

Dataflows are secured at the Workspace-level--there is no more granular security option.  To use dataflows, users must have Contributor access or greater to the Workspace (which means they'll be able to publish reports and create dataflows in the Workspace too).

For this reason, I create dataflows in a separate Workspace from where I publish reports.

[AxiomaticTwo]

Note for anyone browsing this isn't quite right. You can give access to a dataflow via "Viewer" role in the workspace that dataflow is in. 

The user won't be able to "see" the dataflow if they open the workspace in Power BI service, BUT they will when they go to Get Data > Dataflows in Power BI Desktop.

[v-lili6-msft]

hi  @Anonymous 

You could just add the users into the workspace as a Viewer role.  Now they could not have access to any dataflow

https://docs.microsoft.com/en-us/power-bi/service-new-workspaces#roles-in-the-new-workspaces

and then you could just share the build permission for the dataset.

https://docs.microsoft.com/en-us/power-bi/service-datasets-build-permissions

Regards,

Lin

[ToddChitt]

I looked at the first link you supplied, and in there it looks like someone with VIEWER access on a Workspace *should* be able to see Dataflows and Entities.

I tested it out and the person can see the Dataflow itself, but cannot see the Entity under it. Why might that be? We're both Pro users.

[ToddChitt]

Going to answer my own question here: My test subject was using an outdated Power BI Desktop, one that listed Dataflows as a preview feature. Once switching to an updated Windows App for Power BI Desktop, he was able to see the entity inside the Dataflow.

[Tad17]

@ToddChittDon't forget to accept your own answer as the solution!

Glad you figured it out. Hopefully someone else can benefit from your discovery.

[Tad17]

Hey @Anonymous 

I don't believe that giving people access to a dataset allows them to see the dataflow. You can also give read-only access to the datasets and reports. Just be very careful when assigning roles and access to people.

If this helps please kudo.

If this solves your problem please accept it as a solution.