Restrict users with Power BI Pro

[migktym]

My company signed up for 20 Power BI Pro licenses. For information security compliance, we opted for Pro instead of the free version. Only 2 will develop reports and publish them. So the other 18 are business users and will only view reports and dashboards and will not be able to publish new reports.

This means that even business users who have licenses for Power BI Pro, they cannot publish new reports for the Power BI Service, even in their "My Workspace".

I know about sharing reports with read-only permission, it works for reports published by developers. But my issue is about users publishing new reports. I tried to search the Power BI Administration Portal for settings, but I didn't find it. 

How can I restrict the permissions of business users, preventing them from having the same permission as developers like publishing new reports?

Thank you in advance.

Regards,

[v-robertq-msft · Accepted solution]

Hi, @migktym 

According to your description, you want to give 2 users creating authority and the other users only view authority. If you are using a new workspace, I recommend you to assign the “Admin” role to the 2 users who are meant to create reports, “Viewer” role to the 18 left members, the role assign page is like this:

More info about roles in new workspace

Best Regards,

Community Support Team _Robert Qin

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[migktym]

Thanks for your comment.

I've been using Workspace Access to grant viewer permissions for the business users, and it works very well. My issue is when these users create reports in their "My Workspace". I would like to disable this option for them.

(I know... the easiest way is barring Power BI Desktop installation in their machine but it's not in my control and I'd like to have other ways...)

[BG9406]

I have the same issue. Monitoring audit logs after the fact is not a great solution.

[Anonymous]

@migktym When you are in a workspace,  you would see a tab called 'Access' in the top and when you click over that, it will show you the list of person who can access with their permission.

There you can set the permission for your business users accordingly.

[mahimabedi]

You can limit the ability to create workspaces and can provide "view" access to your controlled workspaces, so that will prevent them from creating reports in any shared workspaces.

There isnt an option to prevent users from creating reports in thier personal workspace. You could however monitor the activity in the personal workspaces using audit logs, that way you would know if any user creates a report against your guidelienes. 

PS: Please mark this post as a "solution"  if this helps solving the issue and/or hit the "thumbs-up" button if you found this insighful. Thanks.