Securing Folders In Power Bi Service

[viswaaa]

Hi All,

I have a Org workspace and under that I have 2 folders Sales and HR.

The Sales team can view the Sales folder and the HR team can view the HR folder

.How to implement this in power bi service

I have created Org workspace in power Bi service and then created 2 folders Sales and HR.

I dont see any security to control these 2 folders.

Please suggest how to do this Power Bi Service

[rohit1991 · Accepted solution]

Hi @viswaaa ,

In Power BI Service, there is no direct way to secure individual folders within a workspace, as security is managed at the workspace level. However, you can control access using different approaches. The recommended method is to create separate workspaces for Sales and HR, ensuring that each team has access only to their relevant reports. Alternatively, you can use Power BI Apps with audience targeting, where you publish reports from the Org workspace to a Power BI App and define separate audiences for Sales and HR, restricting visibility accordingly.

Another approach is to implement Row-Level Security (RLS) in Power BI Desktop, defining security roles for Sales and HR and assigning them to respective Azure AD groups in Power BI Service to filter data dynamically. If maintaining a single workspace is necessary, you can control access by sharing specific reports or dashboards directly with the relevant teams instead of relying on folder security. Among these methods, using separate workspaces or Power BI Apps with audience targeting is the most effective way to manage access in Power BI Service while maintaining security.

[andrewsommer]

You cannot do this currently in the service and I am not aware of this being on the roadmap for future development.

Security in the service is generally handled at the workspace level.  So, to effectively do this you would need to create two workspaces, one for HR and one for Sales.

[Akash_Varuna]

Hi @viswaaa I think Power BI Service doesn’t support folder-level security. Instead, create separate workspaces for Sales and HR, assign relevant team members, and publish reports in those workspaces to control access.
Folder level Security is supported by Report Server i guess