Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

The ultimate Microsoft Fabric, Power BI, Azure AI & SQL learning event! Join us in Las Vegas from March 26-28, 2024. Use code MSCUST for a $100 discount. Register Now

Reply
mmace1
Impactful Individual
Impactful Individual

Give ALL USERS Dataset read access (but not build or reshare), then limit access to App. Thoughts?

We have datasets that support reports/apps in other Workspaces.

 

This means one can't just share the report/app, one also has to share access to the underlying Dataset(s) with the users

In our environment, the PowerBI team can't create nor manage Security Groups. So every request to create/modify a Security Group is a potential pain point.

 

My thought: A Security Group for ALL USERS Exists. So grant Dataset access to ALL USERS (not build or reshare, just read access).

 

i.e. - So say we don't want Joe to see anything - fine. Joe has Read access to all Datasets, but since he has access to 0 Reports/Apps, and can't build - he can't actually see anything.


Thoughts / Drawbacks / Insane? 


 

Give Dataset access.png

1 ACCEPTED SOLUTION
GilbertQ
Super User
Super User

Hi @mmace1 

 

Yeah that should work

 

I always suggesting testing it to make sure it works as expected.





Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

View solution in original post

5 REPLIES 5
GilbertQ
Super User
Super User

Hi @mmace1 

 

Yeah that should work

 

I always suggesting testing it to make sure it works as expected.





Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

GilbertQ
Super User
Super User

Hi @mmace1 

 

Yeah that should be ok, I thought you were doing it via the dataset permissions.


If they got read access they can only read it via a report and NOT build any reports.





Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

mmace1
Impactful Individual
Impactful Individual

@GilbertQ 

I mean, I *am* doing it via the dataset permissions. I'd just (hypothetically) be giving all users Read only access to the dataset, not Build. 

And since they wouldn't be given access to any Workspaces, Reports, nor Apps - they couldn't actually see anything, is the idea. 




GilbertQ
Super User
Super User

Hi there

 

If a user has got read access, when they open Power BI desktop and connect to the Power BI Datasets they then would see all the datasets that they have got access to and can build reports.


Whilst it might be a pain with security groups I would suggest keeping this inline to ensure that only the people who should see the data can see the data?





Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

mmace1
Impactful Individual
Impactful Individual

@GilbertQ 

 

Are you sure they'd be able to build anything?  I thought that was the distinction of checking (or not checking) the build checkbox: 
Capture.PNG

Helpful resources

Announcements
Fabric Community Conference

Microsoft Fabric Community Conference

Join us at our first-ever Microsoft Fabric Community Conference, March 26-28, 2024 in Las Vegas with 100+ sessions by community experts and Microsoft engineering.

February 2024 Update Carousel

Power BI Monthly Update - February 2024

Check out the February 2024 Power BI update to learn about new features.

Fabric Career Hub

Microsoft Fabric Career Hub

Explore career paths and learn resources in Fabric.

Fabric Partner Community

Microsoft Fabric Partner Community

Engage with the Fabric engineering team, hear of product updates, business opportunities, and resources in the Fabric Partner Community.

Top Solution Authors
Top Kudoed Authors