Restricting access to a report part of published app

[Anonymous]

Hi,

I have an app workspace which has 4 reports and all these reports are part of the app via which users access the reports.  Out of these 4 reports i dont want to share a specific report with an ad group. 
At the report level if i dont give access of Report 4 to Group 2 will that work or will app access superceed the workspace access ? if yes than how do i restrict the access of "Report 4" to Group 2 (which also has app access) ? 

Name	Should have Access
Report 1	Group 1 and Group 2
Report 2	Group 1 and Group 2
Report 3	Group 1 and Group 2
Report 4	Group 1.

[Greg_Deckler]

@Anonymous - Hmmm, I would think that App access would supercede but you might be able to grant App access and then take away rights at the report level. Overall though, I think it is a bad idea. Publish your 3 reports via the App. Share the 4th report individually as a shared report and not part of the App. 

[Anonymous]

@Greg_Deckler  thanks for your response.  

having 2 separate link kills the idea of a clean solution where a central location/link for all users is available to access the reports which is why i decided to use app at the first place.

 Now what i am not sure about is that if give them access to the app but not give them access to the report dataset from the workspace settings will they still be able to see/use the report ?

[Greg_Deckler]

@Anonymous - I understand. Another thought would be to just use RLS perhaps. But what I do not know is what datasets go with which reports? Do they each have their own dataset or is it just one dataset? If it is a separate dataset for that report, I would just create an RLS role for your Group 1 and Group 2 and just make sure that the rule for Group 2 is never true. Then when Group 2 goes to the report, they won't see anything.

[Anonymous]

@Greg_Deckler 

Is there a simpler way to do this? its so simple in Tableau.  😞  

[v-deddai1-msft]

Hi @Anonymous ,

 Do these groups have only view access to the reports? Why not publish app with three reports to group1 and group2 and share the report4 to group1 only?

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Best Regards,

Dedmon Dai

[Anonymous]

@v-deddai1-msft  we decided to use app because it gives better user experience and customer also wanted a single place to access all the reports, sharing it via workspace will not serve this purpose.

Is RLS the only solution ?

[v-deddai1-msft]

Hi @Anonymous ,

Power BI currently does not support report-level access Settings， RLS could be the only way.

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Best Regards,

Dedmon Dai