Forum Discussion
PBI_Developer2
2 months agoFrequent Visitor
Share semantic model with limited access
Hello Community, In Power BI, is there a way to grant functional teams (Finance, Logistics, etc.) access to a semantic model so they can build reports and create measures in the Service, but with...
- 2 months agoYes, but with one important distinction.If you want Finance, Logistics, etc. to build their own reports from the semantic model without being able to change the semantic model itself, give them Build permission on the semantic model, but do not give them Contributor/Member/Admin access to the workspace that contains the semantic model.Recommended pattern:1. Keep the certified/shared semantic model in a controlled workspace.Only the BI/data team should have Contributor/Member/Admin there.2. Grant the functional teams Build permission on the semantic model.This lets them build reports, use Analyze in Excel, and create content based on the model.3. Let each team build reports in their own workspace.For example:- Finance Reporting workspace- Logistics Reporting workspace- Sales Reporting workspace4. Do not grant Write permission on the semantic model.Write permission is what allows users to republish or modify the semantic model.Important nuance:If users want to create measures inside the central semantic model, then that is editing the model and requires higher permissions. If they only need team-specific reporting logic, the safer approach is to let them build their own reports or downstream/composite models without changing the certified model.So short answer:- Build permission = yes, they can build reports from the model.- Write / workspace Contributor = no, avoid this if you do not want them to alter the model.- Keep semantic model workspace locked down.- Give teams their own report workspaces.Useful Microsoft guides:Build permission for shared semantic models:https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-build-permissionsSemantic model permissions:https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-permissionsShare access to a semantic model:https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-shareManage semantic model access permissions:https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-manage-access-permissionsCreate reports based on semantic models from different workspaces:https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-discover-across-workspaces
๐Parchitect
Solutions Architect ยท Microsoft Fabric Specialist๐กHelpful? Kudos are appreciated.
โ๏ธSolved? Mark as Solution so others can find it faster.
Rupa01
Solution Sage
2 months agoHi PBI_Developer2,
Yes โ this is absolutely possible using Build permission on the semantic model.
- Grant users Build access to the semantic model, and Contributor access in a separate workspace where they can create reports.
- Do not give them Write permission or higher roles in the semantic model workspace.
This setup allows users to -
- Build reports and dashboards on top of the semantic model.
- Create their own measures in report context.
- Not modify the underlying semantic model.
๐ Microsoft reference:
Build permission for shared semantic models
"When you give users Build permission, they can build new content on the semantic model, such as reports and dashboards."
๐ก Helpful? Give a Kudos ๐ โ keep the community growing
โ Solved your issue? Mark as Solution โ๏ธ โ help others find it faster
Best regards,
Rupasree Achari | BI & Fabric Analytics Engineer