How do I know what the data from workspaces was shared with?

[xStevex]

Hello!
I need a consultation.

I have a lot of workspaces, and I want to check if there is abnormal activity (for example, if some data is not accessed by people who should not have access). I don't know how to check it. I used Get-PowerBIWorkspace to get a list of all reports/dashboards/datasets, but I don't see a list of who has access to them. I can only see who has access to the workspace.

Do I understand correctly, If a user is given access to the specific workspace, he will automatically have access to all reports/dashboards/datasets in this workspace?

[otravers · Accepted solution]

Yes, access control in Power BI is workspace centric. Various user roles have different additional rights, and you can also invite people outside of the workspace, but the workspace is the core "sharing unit":

- https://docs.microsoft.com/en-us/power-bi/consumer/end-user-workspaces

- https://docs.microsoft.com/en-us/power-bi/collaborate-share/service-roles-new-workspaces

- https://docs.microsoft.com/en-us/power-bi/connect-data/service-datasets-manage-access-permissions

- https://docs.microsoft.com/en-us/power-bi/collaborate-share/service-share-dashboards

The tool to find out who has access to what is the Scanner API, here's a good entry about it:

https://powerbi.tips/2021/10/using-the-power-bi-scanner-api-to-manage-tenants-entire-metadata/

[xStevex]

Hi!

Do I understand correctly, that if the user has access to the dashboard in Workspace A, he will automatically have access to the whole Workspace A? It's impossible to give access to the dashboard without giving access to the whole Workspace A?