Is there a requirement of 2 workspaces if the user is getting added into AD group by UAM profiles

[Heena_9980400]

Hi Experts,

I have a doubt regarding AD group usage by requesting through UAM Profiles,

I have 2 sets of reports followed below
1. PII data Reports
2. Non-PII data Reports

and I am having a PROD environment, where I will be publishing reports, my doubt is if the user is getting added into AD Group by UAM Profiles, will the user be able to see all the reports and can they access the whole prod workspace?

In this case, do we need 2 workspaces for PII and Non-Pii data reports?

Or I can share the single reports to particular AD Group (in this case they will access workspace)
How is the process here Please guide me on this.

Thanks in Advance


Kind Regards,

K

[JR-DCPS · Accepted solution]

If these reports are the only ones in your workspace, you can consider making an app with multiple audiences using the new preview features. Essentially assign the group of users who can view the PII reports to an audience that has both sets visible, and a second audience for the other AD group that only sees the non-PII data. By using the app this way, you don't assign the groups to the workspace avoiding that headache (also because workspace members automatically get access to all views).

[Heena_9980400]

Hi @JR-DCPS 

 Thanks for the response, 

Do you have any reference links or Can you show them step by step, I don't have any idea about making an app?

Best Regards,

K
Kindly Help me on this.

[AbbasG]

@Heena_9980400 Hi, here is the detailed documentation on publishing the Powe BI app for multiple audience groups. 

https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-create-distribute-apps