Report sharing strategy

Question

Hi all,&nbsp;&nbsp;We have a setup where we grant our viewers a viewer role in the workspace, and report developers get contributor role. The issue with this is that we cannot grant a user access to a subset of the workspace reports. What then happens is users share the report(s) directly to specific users who have no role in the workspace. From a governance perspective, this is dificult to monitor and therefore not ideal.&nbsp;&nbsp;Instead, what I plan to do is use workspace Apps, with audiences to ensure that the appropriate user(s) get access to only the report(s) they are meant to see. From a governance perspective, it would be easier to administer and keep a check on.&nbsp; I don't see any downsides to this approach.&nbsp;&nbsp;What would be great is to completely disable the abiltilty to share a report directly, but I don't see any setting that does that in the Fabric. Have I missed it?&nbsp;&nbsp;&nbsp;

oussamahaimoud · Accepted Answer

No, you haven't missed anything. A dedicated "disable direct share at workspace level" toggle does not exist in Fabric today.

Your App + Audiences approach is the closest available governance control, and it is the right one.

To reduce direct sharing without fully blocking it:

Remove Viewer-level workspace roles entirely; grant access only through the App.
Users without a workspace role cannot share items they don't own or have resharing permission on.
When publishing the App, uncheck "Allow all users to reshare this content" at the audience level, this prevents downstream resharing.

Forum Discussion

Report sharing strategy

2 Replies

Related content

Report Sharing

Partitioning Strategy

Recursion Strategy

Notebook Strategy

Seeking partition strategy