Restricting report access within a published App

[ashishrj]

Consider a scenario wherein we have 5 different reports residing in a single workspace. 

When I publish those reports as an App, all these 5 reports will be published. But, I really do not want to provide access to all those reports with the users added to the App access list. Certain users should only see the report which they might be interested or they really require. Is there any option available to disable or enable report access to individual user once published ?  

I really do not want to create multiple workspaces for each report with different set of users. Also, these workspaces created would be required to move to premium capacity and will need further maintenance. Is there not a way to give individual report access in a single workspace ?

[Seth_C_Bauer]

@ashishrj I might be missing something, but you can certainly deploy the App with only certain reports shared. So, of the 5 - if there are 3 that can be shared with all you can do that via the App. Then the other two you can share the Report directly to that group of people or individuals.

There is no functionality to conditionally exclude or include people to specific reports within an App.

[ashishrj]

@Seth_C_Bauer Thanks for your quick revert. So, if I share reports directly from the workspace (premium capacity), do the end user with whom I share requires a Pro license ? 

[Seth_C_Bauer]

@ashishrj No, as @v-lili6-msft defined there is no need for the end users to have a Pro license. A Premium capacity will allow you to share in any way available. Be that Dashboard, Reports, or Apps it all works the same in terms of covering the license.

RLS will not work in this case, because you don't want them to see the report at all. RLS would only make sense in the context of filtering down the information to the appropriate role within the report.

[ashishrj]

@Seth_C_Bauer @v-lili6-msft  Thank you for all the answers. I will test for various scenarios of sharing a report and also will check how RLS will work for my data model. 

[Anonymous]

Hi @ashishrj, did it work out for you in the end? I'm facing the same issue. I've created an app and it automatically contained all the reports/dashboards available on my company workspace. However, I'd need to differentiate user access to the various reports within the app. 

Thank you

Giac

[Anonymous]

Hi there, did you get any joy in this regard? I am also facing the same problem...

[v-lili6-msft · Accepted solution]

hi @ashishrj 

If reports are in the workspace which is premium capacity, end user could be free license.

https://docs.microsoft.com/en-us/power-bi/service-premium-what-is

and for your case, I think you could also try to use Row-level security (RLS) with Power BI

https://docs.microsoft.com/en-us/power-bi/service-admin-rls

https://radacad.com/row-level-security-configuration-in-power-bi-desktop

https://radacad.com/dynamic-row-level-security-with-manager-level-access-in-power-bi

https://blog.tallan.com/2018/04/10/row-level-security-in-power-bi-part-1-roles-and-users/

Please understand that these links is provided “AS are” with no warranties or guarantees of content changes, and confers no rights.

Best Regards,

Lin

[Anonymous]

Hi,  

I have the same question and was wondering if there was something now?  The original question is a few years old now and hoping this functionality now exists as this has been requested by my clients.

Many thanks

Natalie