User access Restriction to Reports in workspace

[Anonymous]

Hello all,

I have three categories of reports(A,B,C) in single workspace and the users of three categories will have access to this workspace. I want to restrict the report access to the user of respective category. 

Ex-category A users should access A category reports only, not B and C. Similarly for B and C also.

Please let me know solution for this as soon as possible. 

[nickyvv · Accepted solution]

Hi @Anonymous,

unfortunately this is not possible inside one workspace.
Users that have access to a workspace can see all the contents inside of it, except for maybe all the data when Row-Level Security is applied on the datasets. But that only applies to row-level, not a report level security.

So the solution would in my opinion be to seperate the reports into 3 different workspaces. In the case that they are constructed from one single dataset, you could opt for the solution that you have a separated dataset and report, as mentioned here:

[Waqas_BIspecs]

Hi, 

User access with least previllages with the "Viewer" and All reports will be viewable to user as long as its in the the same work space. 
professioanlly speaking having different workspaces by category really helps.
separate workspace for operations, managment, Finance etc will be really helpful. in your case three different workspaces is the solution. 

Workspace - A 

Workspace - B

Workspace - C

all these category with their respective reports.

I hope i was able to explain 

[mohammed24]

Hi,

If the way the user is navigating to the report is from entering the workspace. Unfortunately, there is no report level security. However, I have been in a similar situation. Note: that the way the end user was navigating to the reports was through embed links of the reports. I have individually given access to the end users for the reports in the workspace. 

I hope this helps.

Regards,
Mohammed

[nickyvv]

And even better, by now there's the option of creating multiple audiences in 1 app: https://powerbi.microsoft.com/en-sg/blog/announcing-public-preview-of-multiple-audiences-for-power-b...

[mohammed24]

Hi there,

There is limitations to this. There can be only 10 audience in one app. So, if your workspace has over 10 reports it could be a problem.

Regards,
Mohammed

[V-pazhen-msft · Accepted solution]

@Anonymous 

Unfortunately, Power BI do not support report level restrictions.

As a workaround you may create 3 workspaces as suggested by @nickyvv . Or you may categorize users to Group ABC, then use share button to share each report the Groups.

Paul Zheng
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[deadline]

hi.

Could you please advise how can we forbid on report level the 'Edit' of report possibility in PowerBI services?

thanks in advance

[Anonymous]

@V-pazhen-msft 

So, this group users shouldn't be part of workspace?

[V-pazhen-msft]

@Anonymous 
Yes, you should not assign users to the workspace, because even as viewers they can still see all the reports. 

You can first assign users to O365 groups, then enter the group address when you share reports. BTW, It is assumed the users are from your organization with Pro license. 

Paul Zheng
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[nickyvv · Accepted solution]

Hi @Anonymous,

unfortunately this is not possible inside one workspace.
Users that have access to a workspace can see all the contents inside of it, except for maybe all the data when Row-Level Security is applied on the datasets. But that only applies to row-level, not a report level security.

So the solution would in my opinion be to seperate the reports into 3 different workspaces. In the case that they are constructed from one single dataset, you could opt for the solution that you have a separated dataset and report, as mentioned here: