Managing Semantic Model Permissions

[tkramer]

Hello,

I distribute all Power BI reports on an App.  On the App, I want the users to be able to view the report, and I do NOT want them to be able to download the pbix file, view the underlying dataset, or analyze in excel on the service.

 

 

However, when I add new users to an App audience view, the users are defaulted to a "Read" permission on the data model.  This is shown when I click the three ellipsis (···) on a semantic model on a workspace.

How can I ensure that this setting is off so that when I add a user to an audience view on an App, they only have "App"/report permissions? 

[Anonymous · Accepted solution]

Hi, @tkramer 

You need to add users to the app's audience, so that the user will have app permissions by default.

If you choose to add users on the semantic model of the workspace, the user becomes read permissions, not application permissions.

At the same time, if a user is both the role of your workspace and the audience of the app, the role permissions of the workspace will override the app permissions.
If you initially have read permissions for other users on the semantic model of the workspace (without creating an app), this user will not become an app permission after creating the app, and you need to manually add him to the audience so that the app permission can override the read permission.
If you don't want users to download any of your reports and analyze in excel, you just need to leave the following options unselected when creating a workspace.

Other user view:

If you want users to default to app permissions, you just need to add users to your audience.

How to Get Your Question Answered Quickly

Best Regards

Yongkang Hua

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.