Increase security of DataFlow

[kkozmic]

Hello everyone!

I wanted to share report with my colleagues. In order to do that I gave them permissions to that report and semantic model, which is the source of data for this report (when I gave them access only to the report, they've had errors and could not see the data). They have only "Read" access to the report and semantic model. The semantic model also contains some DataFlows. The problem is that they can still open Power Query in Power BI Desktop and access to that DataFlows, which I don't want. How to take away their permission, so they cannot access the DataFlows?

[kkozmic · Accepted solution]

Thanks for the advice, but I fixed the problem by myself. The problem was not end user's access to semantic model with DataFlows, but It was the problem on my site. I've had global permissions in Power Query desktop set to my account, so that no matter who was logged in, the problem occured. Since I deleted global permissions end user could not get the private data via Power Query desktop.

[aj1973]

Hi @kkozmic 

Ideally Dataflows should be owned by the Workspace and End Users with read only access should consume the reports and dashboards in Power BI App.

So lets say you create a Dataflow in WS_A and then the Semantic Model in a WS_B and for production the Report(Or thin report) in WS_Prod. From WS_Prod create the App and add your audience but don't forget to add access permission on the semantic model in WS_B in order for the user to view data in App.