Restricting Workspace Access with Live Connections in Power BI

[Yiyi_1989]

Dear Community,

I hope someone would be able to help me in this ❤️

I am seeking urgent assistance regarding a challenge I am facing with a Power BI report. I have shared this report via a Power BI app and found that I had to grant workspace access to my users because the datasets originate from live connections. This setup was necessary because the live connections stem from creating Power BI tables via Azure Monitor Logs, which then functioned as Semantic models in Power BI.

However, this presents an issue because I would prefer the users not to have visibility to these datasets. Is there a possible solution to restrict their view of the underlying dataset contents in this context? Would implementing Row-Level-Security be of any help in this situation?

I have devoted the entire morning to researching possible solutions to this problem but, unfortunately, I am still yet to find something that could work. I would incredibly appreciate any insights, suggestions, or advice you may have to overcome this challenge.

Thank you so much for your time and your assistance is highly valued!

Best regards, Brenda

[aj1973]

Hi @Yiyi_1989 

The end user should consume reports and dashboards in a Prodution environment which is the Power BI App. Not recommended to add end users to Workspaces even as only Viewers.

So create an App from the workspace where the report is located ( A thin report would be even better and more secure) give acces to end users to the App and then go back to the semantic model and click on the 3 dots next to it : from there you can give permission to your end users to the semantic model as Read only. 

[Yiyi_1989]

Hello, 

Thanks a lot for your reply! 

I followed your advice by accessing the semantic model of the designated report and granting read-only permissions to users. Unfortunately, my users are still unable to view the report content in the app.

Considering that the semantic model encompasses multiple datasets in my report, I'm curious whether I should assign read rights separately for each dataset.

Best regards,

Brenda

[aj1973 · Accepted solution]

Indeed, you need to do that

[Yiyi_1989]

Thanks so much for your help! I wish you a happy new year 🙂