Forum Discussion

mmossel's avatar
mmossel
Icon for Microsoft Employee rankMicrosoft Employee
5 years ago

How to restrict authorization to activity log?

By default, an admin user is authorized to retrieve all activity logs. I would like to understand how we could restrict this in two possible ways:

1. Can we restrict which workspaces and apps an admin can retrieve activity logs from?

2. Can we restrict which attributes (or operation names) an admin can retrieve?

 

3 Replies

  • _sfrost's avatar
    _sfrost
    Icon for Solution Specialist rankSolution Specialist

    mmossel 

    AFAIK we cannot restrict an admin from being able to access activity logs. As mentioned in the official documentation, having either Power BI Admin role or Global admin role will automatically give you access to all type of activities.

    Track user activities in Power BI - Power BI | Microsoft Docs

     

    Did I answer your questions? Give a thumbs up and accept this post as solution!

    • mmossel's avatar
      mmossel
      Icon for Microsoft Employee rankMicrosoft Employee

      _sfrost thanks for your response. If we build our own dataset of activity logs over time and apply RLS from the source, can particular workspaces/apps be identified easily so that RLS can be applied to only a limited number of workspaces? Is that feasible or difficult?