Forum Discussion
How to Restrict a Service Principal's write access to only one Power BI Workspace
Please let me know if the following is an option to restrict the app write to tha push dataset in a workspace? 1. App Registration (Azure AD) Register your app in Azure AD and grant it Dataset.R...
Your layered approach, combining Azure AD app permissions with Power BI tenant-level and workspace-level access controls, is the recommended and most secure way to achieve your goal. It ensures that while your service principal has the necessary underlying API permissions, its effective scope of action is tightly constrained to only the workspaces and datasets you explicitly allow.
Just always use the least privlige approach in workspace, if contributor is enough, give contributor right 🙂
GilbertQ
Super User
Super UserHi Anonymous
As mentioned above simply put yes this will work as expected.