Fabric workspace App sharing

[Sean_7_e]

Hi. I have been building out a workspace in Fabric with the end goal of sharing reports within an application to various users with various user permission requirements. For example, report access and RLS.

The workspace contains a Lakehouse Shortcut to another workspace data warehouse through a deployment pipeline. There is then a semantic model built ontop of this Lakehouse and a report built on the semantic model.

I have then created a workspace application so I can manage audiences of varous reports. I have assigned a Microsoft user to a security group and made the security group a member of an audience. This has worked for one user but not for another and they have exactly the same permissions. Hence I am unsure why this issue persists.

The user who has access cannot see the workspace but can follow the app link and see their reports and associated data.

The other user has the same permissions, can open the link and see the report but the visuals on the report say error or fix this. The error message says they do not have access.

Please help me resolve this.

Another issue is that I have an ArcGIS for Power BI visual which requires login to our organisational ArcGIS Enterprise account. This works fine when the user is part of an audience but they get an error message on the visual when given direct access to the workspace as a viewer/member. The error message is on the login page and says the url is invalid. I have reached out to Esrti and they are unsure of how to resolve this.

Please help me resolve this too.

[DataVitalizer · Accepted solution]

Hi @Sean_7_e 

It seems to be more about data permissions rather than an App sharing problem, as both of them have access to the App and report.

Since the model uses a Lakehouse Shortcut to another workspace warehouse, there may be access permissions missing for the failing user somewhere along the source workspace/warehouse chain or maybe the user is not resolving properly using RLS.

Regarding the ArcGIS problem, the reason behind that is probably due to redirect URL for ArcGIS Enterprise as it works fine from within the App but does not work when accessed via Workspace.

Did it work? 👍 A kudos would be appreciated
🟨 Mark it as a solution to help spread knowledge 💡

🟩 Let's connect on LinkedIn

[Sean_7_e]

Thanks you for the responses. I was still having issues despite all users having permissions to all items. It seems to be working now with the following set up:

All users are now in a Microsoft Azure Security Group. The group is a member of an audience of the Fabric Power BI application. This gives all members of the group access to the semantic model of the reports within the app. Each user is a member of a role in the semantic model's row level security (RLS), so they can only see the data they should see on the report based on a filter.

I think the clearing of cache on the web browser and making sure the application is updated has likely resolved the problem. 

[v-veshwara-msft]

Hi @Sean_7_e ,

Thanks for reaching out to Microsoft Fabric Community.

Just wanted to check if the responses provided were helpful. If further assistance is needed, please reach out.
Thank you.

[Kagiyama_yutaka · Accepted solution]

The issue is missing Read and Build on the actual semantic‑model object and the App not being re‑published; adding those perms and updating the App fixes the visuals, and ArcGIS only works reliably through the App, not workspace access.

[DataVitalizer · Accepted solution]

Hi @Sean_7_e 

It seems to be more about data permissions rather than an App sharing problem, as both of them have access to the App and report.

Since the model uses a Lakehouse Shortcut to another workspace warehouse, there may be access permissions missing for the failing user somewhere along the source workspace/warehouse chain or maybe the user is not resolving properly using RLS.

Regarding the ArcGIS problem, the reason behind that is probably due to redirect URL for ArcGIS Enterprise as it works fine from within the App but does not work when accessed via Workspace.

Did it work? 👍 A kudos would be appreciated
🟨 Mark it as a solution to help spread knowledge 💡

🟩 Let's connect on LinkedIn