Forum Discussion
Handling Folder-Level Permissions and Workspace Management
Hi Adit1 ,
I'm not sure I can answer all of those questions, but I can try to point you in the right direction to get more information about Fabric and Power BI.
There are roles within a workspace that can help you handle many editors and viewers. A best practice is to create groups like an editor and viewer group, assign the appropriate workspace role to each group and then add users to these groups:
https://learn.microsoft.com/en-us/fabric/fundamentals/roles-workspaces
If you need more granular permissions within a workspace, you can also assign permissions to specific items within a workspace like so:
https://learn.microsoft.com/en-us/fabric/security/permission-model#item-permissions
Here is more information about organizing workspaces. Fabric also has the concept of Domains which group multiple workspaces.
https://www.youtube.com/watch?v=EP-Sxz_lBC4
https://www.youtube.com/watch?v=H6SmdqFbhE0
Here are some best practices around data pipelines:
https://www.youtube.com/watch?v=Zp1xRXJl86E
Hi v-sgandrathi and djurecic Thank you for the comprehensive recommendations. I will move forward with implementing AAD security groups for role management and adopt a functional workspace structure aligned to domains. I will also transition business users to consuming content via Power BI Apps with audience targeting, and begin leveraging deployment pipelines for Dev-Test-Prod workflows. This gives us a solid direction and I appreciate the clear guidance from you and djurecic
Hi Adit1,
Thank you for the update and glad to hear the recommendations were helpful. Moving towards AAD security groups, domain-aligned workspace structure, and Power BI Apps with targeted audiences will definitely streamline access management and improve overall governance.
If it is solved, please mark the helpful reply or share your solution and accept it as solution, it will be helpful for other members of the community who have similar problems as yours to solve it faster.
Thank you.