Power BI workspace - get users permissions list

[Anonymous]

Hi ,

I 'm looking for automated way to extract users permissions list from a Power BI workspace.

How can I export the users permission list in excel or csv format?

[v-lili6-msft]

hi  @Anonymous 

Currently if your workspaces are using the new Modern Workspaces (V2) you can do this via the Power BI API

https://docs.microsoft.com/en-us/rest/api/power-bi/admin/groups_getgroupsasadmin#get-workspaces-with-users-expanded-(only-applicable-for-workspaces-in-the-new-workspace-experience

Regards,

Lin

[Anonymous · Accepted solution]

Hi @Anonymous,

To get a complete overview, it's tricky ..

There's a number of ways reports and dashboards can be shared, and not all of them allow to be extracted easily.

- Individual Report / Dasbhoard Sharing --> Absolutely no way to automate this (to date, or I've missed it). Open a report/dashboard, and browse to the access tab

- Workspace v2 Access (Individual Access) --> Get Group Users or use the Expand function

- Workspace v2 Access (Group Access) --> Get Group Users, then translate group membership through Office 365 Graph API or Azure AD

- Workspace v1 Access --> Translate through the O365 Graph API

- Apps Access (Individual Access) --> Manually check the apps

- Apps Access (Group Access) --> Manually check the apps

- Email Subscriptions --> Manually check them (I think, but I'd have to go look for it ..)

In addition, set up Audit Logs extract to capture the ShareReport, ShareDashboard actions, and act upon them.

You'll want to work with groups (Either O365 or Azure AD) to streamline it as much as possible, and definitely try to reduce individual report sharing to a minimum.

My definite advice is to go look at the newly released Power BI Enterprise Deployment Whitepaper, which covers strategies for you to adapt.  

Benni