Restrict viewing of Semantic Model

[bedddo]

Hi all

I'm fairly new to Power BI and learning as I go along. We have a report for an external customer that has been written by another developer. The report for the customer will be shared to their external email address and the user will ONLY be setup with view privileges. When we test this by logging in with the external email address, we can view the report as expected.  However, we are able to by clicking on the 3 dots at the top of the report, view the semantic model. We are unable to view the actual data, but can still see the table structures, which is something we want to avoid.

We've turned off external sharing on the settings of the actual dataset, but we can still see the tables and their structure?? Is this by design, or there something really easy that we just haven't done to fix this?

Thanks in advance for any help.

[bedddo · Accepted solution]

I managed this eventually by actually just hiding the tables in Power BI Desktop and re-publishing.

[aj1973]

Hi @bedddo 

You need to remove access permission to the semantic model.

[bedddo]

Thanks I have done that but when I try to view the report I get 

I still need them to be abkle to access the report, but not be able to view the table structures (even though they cannot see the underlying data in the table).

Thanks

[aj1973]

Then he needs to be removed from the workspace. You can give acces to the report and its data without allowing the end user to be in the Workspace by using Power BI App. That's what Power BI App is meant for.

[bedddo]

OK thank you.  I don't know how to do that.  Would you be able to point me in the right direction with some help files please?

Thanks for the help so far.

[aj1973]

Long story short, in a professional way :

• Create 3 Workspaces; WSName_Dev&Test , WSName_Dataset_Prod , WSName_Report_Prod
• Publish your dev/test pbix and its report to WSName_Dev&Test
• Once all good and ready for Production, publish the Pbix to WSName_Dataset_Prod and from the report download 
• Open the copy(Thin report) in your desktop and republish it to WSName_Report_Prod
• (Optional) Go back to WSName_Dataset_Prod and delete the report(Keep the Pbix)
• From WSName_Report_Prod create the App and add your Users or Security to group to audience then publish the App
• Go back to WSName_Dataset_Prod and Manage permissions of the semantic 

  to add users or security group as viewers. Do Not Add users to Workspaces.

• Inform or share the App with users.

Hope all is clear.

[bedddo]

Wow!! OK thanks. I'll try that tomorrow and see how I get along. Thank you so much for the help.