Forum Discussion

PBI_Developer2's avatar
PBI_Developer2
Frequent Visitor
2 months ago
Solved

Share semantic model with limited access

Hello Community,   In Power BI, is there a way to grant functional teams (Finance, Logistics, etc.) access to a semantic model so they can build reports and create measures in the Service, but with...
  • Parchitect's avatar
    2 months ago
    Yes, but with one important distinction.

     

    If you want Finance, Logistics, etc. to build their own reports from the semantic model without being able to change the semantic model itself, give them Build permission on the semantic model, but do not give them Contributor/Member/Admin access to the workspace that contains the semantic model.

     

    Recommended pattern:
    1. Keep the certified/shared semantic model in a controlled workspace.
       Only the BI/data team should have Contributor/Member/Admin there.

    2. Grant the functional teams Build permission on the semantic model.
       This lets them build reports, use Analyze in Excel, and create content based on the model.

     

    3. Let each team build reports in their own workspace.
       For example:
       - Finance Reporting workspace
       - Logistics Reporting workspace
       - Sales Reporting workspace

     

    4. Do not grant Write permission on the semantic model.
       Write permission is what allows users to republish or modify the semantic model.

     

    Important nuance:
    If users want to create measures inside the central semantic model, then that is editing the model and requires higher permissions. If they only need team-specific reporting logic, the safer approach is to let them build their own reports or downstream/composite models without changing the certified model.

     

    So short answer:
    - Build permission = yes, they can build reports from the model.
    - Write / workspace Contributor = no, avoid this if you do not want them to alter the model.
    - Keep semantic model workspace locked down.
    - Give teams their own report workspaces.

     

    Useful Microsoft guides:
    Build permission for shared semantic models:
    https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-build-permissions

     

    Semantic model permissions:
    https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-permissions

     

    Share access to a semantic model:
    https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-share

     

    Manage semantic model access permissions:
    https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-manage-access-permissions

     

    Create reports based on semantic models from different workspaces:
    https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-discover-across-workspaces
     

    🔍Parchitect
    Solutions Architect · Microsoft Fabric Specialist

    💡Helpful? Kudos are appreciated.
    ✔️Solved? Mark as Solution so others can find it faster.