Monitor permissions in Power BI Service (what reports are shared with a user)

[drk_torben]

Hi,

we use Power BI Service (Pro licenses) with different workspaces and share most of our Reports/Dashboards either by sharing directly to an individual user or by sharing to a azure security group (with indidual users as members).

I am looking for a method to monitor which reports are shared to which users (indidual or by membership in a group).

What are best practices to achieve this?

My actual idea is to have a closer look to the Power BI REST API. But I have no experience with the API and so I would be very happy about some help 🙂

Regards,

Torben

[v-rongtiep-msft · Accepted solution]

Hi @drk_torben ,

You can consider to enable auditing functionality in the Power BI admin portal. When this feature is turned on, Power BI will start logging various activities that your users perform in Power BI. You are able to search audit log to know if one dashboard is shared and recipient email of the shared dashboard. However, please note the following things when using auditing functionality.

1. The auditing feature in Power BI is in preview and is available in all data regions except those in Australia and Europe.
2. Auditing is a Power BI Pro feature and auditing events are only available for Power BI Pro users.
3. The audit logs take up to 48 hours to show up in the O365 Security & Compliance Center.

The audit feature is still in preview, if you have any feedback about it, please add your vote and comments in this idea:

Better Auditing of User Activity (Datasets, Reports, Dashboards, Exports)

Reference:

Track user activities in Power BI - Power BI | Microsoft Docs

Best Regards

Community Support Team _ Polly

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[drk_torben]

Update - these Power BI REST APIs seems to be relevant:

API Admin - Reports GetReportUsersAsAdmin
Required Scope: Tenant.Read.All or Tenant.ReadWrite.All

API Admin - Dashboards GetDashboardUsersAsAdmin
Required Scope: Tenant.Read.All or Tenant.ReadWrite.All

API Admin - Datasets GetDatasetUsersAsAdmin
Required Scope: Tenant.Read.All or Tenant.ReadWrite.All

I do not have an Power BI Admin account in our tenant, so I am actually waiting for a service principal with the required scope.