Forum Discussion

RC141981's avatar
RC141981
New Member
2 months ago
Solved

Publish Power BI App

I have a Workspace that is hosted on F4 Fabric Capacity and I have 2 apps in the same workspace as there are 2 Reports. Now 1 group of users need access to 1 Report(App) and other group of users need...
  • v-abhinavmu's avatar
    v-abhinavmu
    2 months ago

    Hi RC141981,

    Thank you for posting your query in the Microsoft Fabric Community Forum, and thanks to krishnakanth240 & julsr & Parchitect for sharing valuable insights.

     

    Could you please confirm if your query has been resolved by the provided solutions? This would be helpful for other members who may encounter similar issues.

     

    Thank you for being part of the Microsoft Fabric Community.

julsr's avatar
julsr
Icon for Continued Contributor rankContinued Contributor
2 months ago

Hi RC141981 ,

1. Do users need workspace Viewer access to see the app?

No, not for normal report consumers.

Microsoft’s guidance is to distribute read-only content through app permissions (audiences), not workspace roles. Workspace roles are for collaborators (authors, testers, admins). App permissions are for consumers.

So if users only appeared after you added Viewer on the workspace, something in the app distribution path was likely incomplete — not a product requirement to use workspace access.

2. How do you stop Group 1 from seeing App/Report 2 (and vice versa)?

Do not use workspace Viewer access for consumers. Workspace Viewers can see all items in the workspace, and workspace members effectively bypass audience isolation — they can see content across audiences, not just their assigned slice. Community threads and Microsoft guidance align on this: remove consumers from the workspace and grant access only through the app.

You have two supported patterns depending on app type:

Option A — Classic workspace app (one app per workspace)

A workspace supports only one workspace app; use multiple audiences inside that single app 

Option B — Org apps (multiple apps per workspace) — likely your case

If you truly have two separate apps in one workspace, you are probably using org apps. That is a good fit for your scenario.

Org apps propagate Read access to included reports and their semantic models (including cross-workspace models) when you share the org app — without workspace membership. Audiences within each org app are also available if you need finer control inside one app.