Need a report for which reports security groups can access

[DatDataNerd]

Is there a way to grab a dataset of all of the reports in a workspace and see which users and security groups have access to them? Kind of like how you can grab a dataset of usage per report/user. Similarly , is there a way to run a report on which users are assigned to which 365 security groups? I hope this is the correct place to ask this but I'm not 100% sure where to look.

[Anonymous · Accepted solution]

Hi @DatDataNerd 

1.You can through the REST API below to get the user or group that who can access the dataset by the dataset ID .Enter the dataset ID in the Request URL you will get the result you want .

Admin - Datasets GetDatasetUsersAsAdmin - REST API (Power BI Power BI REST APIs) | Microsoft Docs

GET https://api.powerbi.com/v1.0/myorg/admin/datasets/{datasetId}/users

“ailsa tao” is my security group ,you can see it in the return value .

2.You cannot through a report to get the users that in security groups. Because we create security group and add users in the groups in Microsoft 365 admin center. If you want see the users in security group , you can sign in the Microsoft 365 admin center and see it in Home => Active teams & groups , with an administrator account .You can through the link below to learn more about users in security group .

https://docs.microsoft.com/en-us/microsoft-365/admin/create-groups/manage-groups?view=o365-worldwide

3.If you want to know which users accessed the report, you can learn more through these links below .

https://docs.microsoft.com/en-us/power-bi/collaborate-share/service-modern-usage-metrics

https://docs.microsoft.com/en-us/power-bi/collaborate-share/service-usage-metrics

Hope it will help you !

Best Regard

Community Support Team _ Ailsa Tao

[DatDataNerd]

Thank you, this info lead me to exactly what I need.

[lbendlin]

For Premium workspaces you can get this information from the tenant inventory logs (look for the "sharedTo"  attribute).  Talk to your tenant admin to get extracts.  If this is for personal or shared capacities then there's not really a way to get this.

Note that "access to reports" and "usage of reports"  are separate things.