Error fetching data for this visual in app for some users

[Niko90]

Hello,

We are getting the following error for some users when reports are shared via the app audiences:

Error fetching data for this visual
A connection could not be made to the data source with the Name of '{"protocol':"analysis-services","address":{"server":"powerbi://api.powerbi.com/v1.0/myorg/OUR_WORKSPACE","database":"OUR_SEMANTIC_MODEL_B"},"authentication":null,"query":null}'

Issue: We add several users (~10) to an audience in the workspace app - for some, the visuals display as expected, for others, all the visuals give the above message.

Any ideas on how to fix?

Setup:

• Report A has a direct query connection to different semantic model (we'll call it B).
• Report A has added a few formulas and a couple of parameters (these do not interact with RLS).
• The other semantic model is on Import Mode and has Roles defined for role-level security.
• All content is in the same workspace.
• Fabric capacity F64.
• Semantic models are refreshed.
• These users are added in the app, but do not have Workspace-level access.

Permissions checked:

• Report A permissions -> None of the app only users appear under Manage Permissions for Report A. (Referring to both the users that work & users that don't work).
• Semantic Model A permissions -> All of the app only users appear with "App" permissions (Report A's direct semantic model).
• Semantic Model B permissions -> All of the app only users appear with "Read" permissions (Underlying Semantic Model).
• Semantic Model B security -> All of the app only users were added to a role.
• Semantic Model B test as role -> If I "test as role" and test each app only user, the visuals appear as expected.

Other things we've checked:

• All users seem to have the same security permissions.
• Readding users to the app (sometimes this just adjust who works but breaks others).

We could resolve it by giving all app only users Viewer access to the workspace, but that would give them more access than desired.

[V-yubandi-msft]

Hi @Niko90 ,

If your issue is resolved, that’s good to hear. But if you're still facing any difficulties or running into new challenges, feel free to let me know.

Thank you.

[V-yubandi-msft · Accepted solution]

Hi @Niko90 ,

We appreciate you bringing your question to the Microsoft Fabric Community. To add to @andrewsommer  suggestion. Because Report A uses DirectQuery over Semantic Model B, users need Build permissions on Semantic Model A to view the visuals. App audiences don’t automatically have Build access, which leads to the Error fetching data for this visual. 

Create a security group for app only users and grant it Read + Build permissions on Semantic Model A to ensure proper access for DirectQuery based reports.

Thank you for your prompt reply in the community @andrewsommer .

Regards,
Yugandhar.

[andrewsommer]

I would start by explicitly granting read permissions on model A.  Ideally, you would use a security group, grant read access to the group and then add users to that group.

Please mark this post as a solution if it helps you. Appreciate Kudos.