Forum Discussion
How to Restrict a Service Principal's write access to only one Power BI Workspace
Your layered approach, combining Azure AD app permissions with Power BI tenant-level and workspace-level access controls, is the recommended and most secure way to achieve your goal. It ensures that while your service principal has the necessary underlying API permissions, its effective scope of action is tightly constrained to only the workspaces and datasets you explicitly allow.
Just always use the least privlige approach in workspace, if contributor is enough, give contributor right 🙂
Hi Anonymous ,
As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?
If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.
|
Please don't forget to give a "Kudos " – I’d truly appreciate it! |
Regards,
B Manikanteswara Reddy
Hi Anonymous ,
Thank you for reaching out to Microsoft Fabric Community Forum.
As we haven’t heard back from you, we will go ahead and close this ticket for now.
If you need any further assistance, please don’t hesitate to raise a new ticket, we’re always happy to help.
Our sincere apologies if there was any inconvenience caused.
Regards,
B Manikanteswara Reddy