Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
1 year ago
Solved

How to Restrict a Service Principal's write access to only one Power BI Workspace

Please let me know if the following is an option to restrict the app write to tha push dataset in a workspace?   1. App Registration (Azure AD) Register your app in Azure AD and grant it Dataset.R...
  • Cookistador's avatar
    1 year ago

    Your layered approach, combining Azure AD app permissions with Power BI tenant-level and workspace-level access controls, is the recommended and most secure way to achieve your goal. It ensures that while your service principal has the necessary underlying API permissions, its effective scope of action is tightly constrained to only the workspaces and datasets you explicitly allow.

     

    Just always use the least privlige approach in workspace, if contributor is enough, give contributor right 🙂