Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
4 years ago
Solved

Update object level security (OLS) roles

Hi All I have a question about OLS.  Suppose I define two roles for OLS on a dataset: roleA - may see Name information roleB - may NOT see Name information I define the roles and in the serv...
Need Help
  • bcdobbs's avatar
    bcdobbs
    4 years ago

    There's a very detailed table available here: Roles in the new workspaces in Power BI - Power BI | Microsoft Docs

     

    If a workspace member was a viewer but had build permissions on the dataset they could build a report on the dataset in power bi desktop or in the service and save to their "My Workspace".

    But yes your last sentence is correct.

bcdobbs's avatar
bcdobbs
Community Champion
4 years ago

So we have a workspace called DW-Models. Myself and one colleague who create the models are member of that workspace.

 

Everyone else is granted access to the models via:

 

and given either Read or Read and Build permissions.

 

Read allows someone to view a report built on top of the dataset in any other workspace.

Build allows someone to build a report on top of the dataset which they could publish somewhere else.

 

Neither allows them to edit the model in any way.

Anonymous's avatar
Anonymous
Not applicable
4 years ago

Thnx bcdobbs 

And how is that then related to their role in their own Workspace (WS-B or WS-C) , for instance Contributor or Viewer? Has it use to give the role Viewer build permission?


But nevertheless, what you say is: store the datasets in a separate workspace, let IT handle that and no end-user can mess up /update role information ??