Forum Discussion
Update object level security (OLS) roles
There's a very detailed table available here: Roles in the new workspaces in Power BI - Power BI | Microsoft Docs
If a workspace member was a viewer but had build permissions on the dataset they could build a report on the dataset in power bi desktop or in the service and save to their "My Workspace".
But yes your last sentence is correct.
Hi bcdobbs
thnx for your reaction. Let me further explain our situation.
We are storing the datasets in a separate workspace, lets call it WS-A. We have just begun, so there is one dataset now, next will be following soon. For separate user groups we create WS-B, WS-B etc. Users can then read the dataset(s) in WS-A.
So, whay you say in the last line: store the datasets in that separate workspace. Only let some people from IT have access to WS-A to change roles. Contributors in WS-B and WS-C will never be able to change anything in role allocation of the datasets in WS-A, although they have edit permission??
So we have a workspace called DW-Models. Myself and one colleague who create the models are member of that workspace.
Everyone else is granted access to the models via:
and given either Read or Read and Build permissions.
Read allows someone to view a report built on top of the dataset in any other workspace.
Build allows someone to build a report on top of the dataset which they could publish somewhere else.
Neither allows them to edit the model in any way.
Thnx bcdobbs
And how is that then related to their role in their own Workspace (WS-B or WS-C) , for instance Contributor or Viewer? Has it use to give the role Viewer build permission?
But nevertheless, what you say is: store the datasets in a separate workspace, let IT handle that and no end-user can mess up /update role information ??There's a very detailed table available here: Roles in the new workspaces in Power BI - Power BI | Microsoft Docs
If a workspace member was a viewer but had build permissions on the dataset they could build a report on the dataset in power bi desktop or in the service and save to their "My Workspace".
But yes your last sentence is correct.Thnx bcdobbs for all your answers. I am gonna read the link. Great !!