Forum Discussion
Handling Folder-Level Permissions and Workspace Management
Hi Adit1 ,
I'm not sure I can answer all of those questions, but I can try to point you in the right direction to get more information about Fabric and Power BI.
There are roles within a workspace that can help you handle many editors and viewers. A best practice is to create groups like an editor and viewer group, assign the appropriate workspace role to each group and then add users to these groups:
https://learn.microsoft.com/en-us/fabric/fundamentals/roles-workspaces
If you need more granular permissions within a workspace, you can also assign permissions to specific items within a workspace like so:
https://learn.microsoft.com/en-us/fabric/security/permission-model#item-permissions
Here is more information about organizing workspaces. Fabric also has the concept of Domains which group multiple workspaces.
https://www.youtube.com/watch?v=EP-Sxz_lBC4
https://www.youtube.com/watch?v=H6SmdqFbhE0
Here are some best practices around data pipelines:
https://www.youtube.com/watch?v=Zp1xRXJl86E
Hi Adit1 ,
Are most of your users editing the reports, or do they have read-only access? If the majority are read only, you could look into workspace apps or the newer org apps combined with audiences.
Workspace apps:
https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-create-distribute-apps
Org apps:
https://learn.microsoft.com/en-us/power-bi/consumer/org-app-items/org-app-items
More info:
Thank you for your input! In our environment, many users will have editing rights mostly our report developers and data engineers while business users will largely have viewer access. We plan to have dataflows, pipelines, and data warehouse datasets etc organized within workspaces as the collaboration containers.
To help us design an effective access model, I would like to get advise on below:
How best to manage workspace roles when there’s a mix of many editors and many viewers?
Strategies for workspace organization given we will have data engineering and business intelligence assets together.
Recommendations on using apps and audience targeting in this mixed access scenario.
Also, how can we best handle deployment pipelines for continuous updates in such a structure?
Additionally, we would appreciate any governance best practices or automation approaches for managing permissions at scale.
Thanks in advance!
Hi Adit1 ,
I'm not sure I can answer all of those questions, but I can try to point you in the right direction to get more information about Fabric and Power BI.
There are roles within a workspace that can help you handle many editors and viewers. A best practice is to create groups like an editor and viewer group, assign the appropriate workspace role to each group and then add users to these groups:
https://learn.microsoft.com/en-us/fabric/fundamentals/roles-workspaces
If you need more granular permissions within a workspace, you can also assign permissions to specific items within a workspace like so:
https://learn.microsoft.com/en-us/fabric/security/permission-model#item-permissions
Here is more information about organizing workspaces. Fabric also has the concept of Domains which group multiple workspaces.
https://www.youtube.com/watch?v=EP-Sxz_lBC4
https://www.youtube.com/watch?v=H6SmdqFbhE0
Here are some best practices around data pipelines:
https://www.youtube.com/watch?v=Zp1xRXJl86E
Hi @
Hi djurecicK2, Thank you very much for your valuable inputs. I am checking on the roles in workspace and also checked on creating multiple apps in the workspace to manage the permissions for user groups. I understand we can't replicate the granular kind of user acecss policies like we do in Tableau sites and projects. I will check on domains specific access management since this is very critical for us.Thank you again!
