Forum Discussion
Power BI App permissions
I have created a Power BI app, and I would like people on my team, along with a few other team members, to be able to view the app without granting them direct access to the underlying semantic model, which is in a separate workspace. What is the most efficient and easiest way to achieve this
Hello Rosy081
To allow your team members to view a Power BI app without granting them direct access to the underlying semantic model (located in a separate workspace):Publish reports from the workspace where the app resides (e.g., Workspace B) and configure access via App Audiences. This feature allows you to control who can view specific reports or dashboards within the app without exposing workspace-level permissions or dataset access.
Assign users or groups to the app’s audience, ensuring they only have read access to the content included in the app. This approach separates report consumers from workspace contributors or admins, maintaining security and simplicityhttps://data-goblins.com/power-bi/app-audiences
https://epmstrategy.com/power-bi-managing-app-audiences
https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-create-distribute-apps
If this is helpful please accept the answer and give kudos
3 Replies
Hi Rosy081
-
Use Viewer Role in the App Workspace
- Add users to the Power BI App, not the workspace.
- Assign them the "Viewer" role, which allows access to the app but not the dataset.
-
Disable Direct Access to the Dataset
- Ensure users do not have workspace access where the semantic model resides.
- In Manage Permissions for the dataset, do not assign users direct access.
-
Use a Separate Report Workspace
- Keep the report in one workspace and the semantic model in another.
- Share only the report workspace via the Power BI App.
-
Leverage Build Permissions Carefully
- Avoid giving Build Permissions on the dataset unless users need to create their own reports.
-
Hello Rosy081
To allow your team members to view a Power BI app without granting them direct access to the underlying semantic model (located in a separate workspace):Publish reports from the workspace where the app resides (e.g., Workspace B) and configure access via App Audiences. This feature allows you to control who can view specific reports or dashboards within the app without exposing workspace-level permissions or dataset access.
Assign users or groups to the app’s audience, ensuring they only have read access to the content included in the app. This approach separates report consumers from workspace contributors or admins, maintaining security and simplicityhttps://data-goblins.com/power-bi/app-audiences
https://epmstrategy.com/power-bi-managing-app-audiences
https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-create-distribute-apps
If this is helpful please accept the answer and give kudos
Hi Rosy081 ,
I wanted to check if you had the opportunity to review the information provided nilendraFabric and rohit1991 . Please feel free to contact us if you have any further questions. If the responses provided has addressed your query, please accept it as a solution and give a 'Kudos' so other members can easily find it.
Thank you.
