Forum Discussion
Power BI App permissions
Hello Rosy081
To allow your team members to view a Power BI app without granting them direct access to the underlying semantic model (located in a separate workspace):Publish reports from the workspace where the app resides (e.g., Workspace B) and configure access via App Audiences. This feature allows you to control who can view specific reports or dashboards within the app without exposing workspace-level permissions or dataset access.
Assign users or groups to the app’s audience, ensuring they only have read access to the content included in the app. This approach separates report consumers from workspace contributors or admins, maintaining security and simplicityhttps://data-goblins.com/power-bi/app-audiences
https://epmstrategy.com/power-bi-managing-app-audiences
https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-create-distribute-apps
If this is helpful please accept the answer and give kudos
Hi Rosy081
-
Use Viewer Role in the App Workspace
- Add users to the Power BI App, not the workspace.
- Assign them the "Viewer" role, which allows access to the app but not the dataset.
-
Disable Direct Access to the Dataset
- Ensure users do not have workspace access where the semantic model resides.
- In Manage Permissions for the dataset, do not assign users direct access.
-
Use a Separate Report Workspace
- Keep the report in one workspace and the semantic model in another.
- Share only the report workspace via the Power BI App.
-
Leverage Build Permissions Carefully
- Avoid giving Build Permissions on the dataset unless users need to create their own reports.