Restrict sharing while allowing users to create/edit content

[Anonymous]

My organization would like to allow our internal Power BI users to create their own Power BI content from existing datasets that my team has published, but compliance requirements prevent us from allowing anyone outside our team to share any data/content with other internal users, unless approved by us first.

As a solution, we've decided to use Analysis Services, so even if someone shares content within the Power BI Service, the recipient can't see any of the data unless our team gives them permission to access the Analysis Services model.

Is there any way we can accomplish this without using Analysis Services?

There's the option to allow users to edit a report without allowing them to share it, but then what's stopping them from publishing a new copy of the report and sharing that one with anyone? There's also Row-Level Security, but does this only work for read-only content (since anyone who can create content from a dataset can also edit the dataset including the RLS settings)?

This is sort of similar to this question: https://community.powerbi.com/t5/Service/Sharing-a-dataset-but-NOT-allowing-anyone-to-edit-it/m-p/69... 

Does anyone know if this can be done with just Power BI, now or in the future?

[TeigeGao · Accepted solution]

Hi @Anonymous ,

In your scenario, we can share the PowerBI dataset to these users without the permission reshare.

A member of the workspace where the dataset resides can assign the permission to specific users or security groups in the Permission center. Select the ellipsis (…) next to a dataset > Manage Permissions.

For more information, please refer to this document: https://docs.microsoft.com/en-us/power-bi/service-datasets-build-permissions

Best Regards,

Teige