Restricting users to Export Data from Published report

[KarenFingerhut]

Hi there

Can someone please advise

I have a report in a workspace with 20 people accessing. I now want to allow only 5 of those users to be able to export the data. If I do the following 

• change the settings in the PBIX to allow export and republish to workspace
• In admin portal add the newly created security group with these 5 users to the export to excel and csv permissions

what i'm finding is that everyone, not just the ones in the new security group, is able to export the data. Is there a way to ensure those not in the security are not able to export the data or do I have to create a copy and put that in a separate workspace

Many thanks

Karen

[rohit1991]

hi @KarenFingerhut ,

At the moment, Power BI doesn’t let you pick and choose who can export data within a single report or workspace the export setting is basically all-or-nothing for everyone with access to that report, depending on their role.

Here’s the best approach right now:

1. Set Export Permissions at the Report Level: In Power BI Desktop (and again in the Service), set the export option to “Don’t allow export” or “Summarized data only,” depending on what you want for most users.
   
   

2. Assign Viewer Role to General Users: Give everyone who shouldn’t export the Viewer role. Viewers can’t export data unless you allow it for everyone.
   
   

3. Create a Separate Workspace or Duplicate Report for Export Users: For the small group who do need to export, set up a separate workspace (or copy of the report) with export enabled, and only give those users access to it. It’s a bit of a workaround, but it’s currently the only way to get truly granular control.

[KarenFingerhut]

Hi @rohit1991 

Thanks for getting back to me.
Contributor won't work as it gives them elivated permissions that I don't want them to have.

Once again thank you

Karen

[ibarrau]

Hi. If the users you want to allow will allows export from any report and the other never, then you can go to Admin portal -> Tenant settings and allow the export to that specific security group. That way only those 5 will see the export data button

As an alternative you could prevent export for the whole tenant. Then think in a way to let RLS handle a hidden page with an export button of power automate, controling export from a custom development instead of the Service feature.

I hope that make sense

[KarenFingerhut]

Thanks @ibarrau . I think so 😊. Ill look in to your explanation. Thanks for getting back to me. 

Karen

[Anonymous]

Hi @KarenFingerhut,

we would like to follow up to see if the solution provided by the super user resolved your issue. Please let us know if you need any further assistance.
If our super user response resolved your issue, please mark it as "Accept as solution" and click "Yes" if you found it helpful.

Regards,

Vinay Pabbu

[KarenFingerhut · Accepted solution]

Hi Vinay

Both of the replies to me were great. However on this occasion didn't resolve the issue. I can't add users as contributors as that would give them additional priviledges to the workspace. So I had to create a new workspace and republish the PBIX files with export permissions for those particular users and add them to a security group

Which do I accept as a solution to close this query? 🙂

Many thanks

Karen

[Anonymous]

Hi @KarenFingerhut,

You can accept your own reply as the solution since it accurately reflects what worked for you. This approach provides clarity for others who may encounter the same issue.

Regards,

Vinay Pabbu