Power BI workspace - get users permissions list

Hi Anonymous,

To get a complete overview, it's tricky ..

There's a number of ways reports and dashboards can be shared, and not all of them allow to be extracted easily.

- Individual Report / Dasbhoard Sharing --> Absolutely no way to automate this (to date, or I've missed it). Open a report/dashboard, and browse to the access tab

- Workspace v2 Access (Individual Access) --> Get Group Users or use the Expand function

- Workspace v2 Access (Group Access) --> Get Group Users, then translate group membership through Office 365 Graph API or Azure AD

- Workspace v1 Access --> Translate through the O365 Graph API

- Apps Access (Individual Access) --> Manually check the apps

- Apps Access (Group Access) --> Manually check the apps

- Email Subscriptions --> Manually check them (I think, but I'd have to go look for it ..)

In addition, set up Audit Logs extract to capture the ShareReport, ShareDashboard actions, and act upon them.

You'll want to work with groups (Either O365 or Azure AD) to streamline it as much as possible, and definitely try to reduce individual report sharing to a minimum.

My definite advice is to go look at the newly released Power BI Enterprise Deployment Whitepaper, which covers strategies for you to adapt.  

Benni