Viewer Role Cannot Access Cross-Workspace Semantic Model-Based Reports

[Zhongyuan]

In a Power BI report located in Workspace A, there are 3 visuals: a, b, and c. Visuals a and b are built using a semantic model from Workspace A, while visual c is based on a semantic model from Workspace B.

Users have been assigned the Viewer role in both Workspace A and Workspace B. While they can see visuals a and b without issue, they encounter an error when trying to view visual c.

If the users are granted Build or Write permissions for the semantic model in Workspace B, or if their role in Workspace B is elevated to Contributor, they can then view visual c without errors.

Is there any official documentation explaining this behavior?

[FarhanJeelani · Accepted solution]

Hi @Zhongyuan ,

Yes, there is official documentation related to this behavior. In Power BI, when using cross-workspace models (semantic models from one workspace in a report published to another), the Viewer role has limitations. Specifically, viewers can only view reports and dashboards that are fully within the workspace they have access to. If a report includes visuals based on semantic models or datasets from another workspace, users must have at least Build or Contributor permissions for the dataset or model in the external workspace to access those visuals.

Here’s a breakdown of the key points:

1. Viewer Role Restrictions: The Viewer role only provides access to the report itself, not the underlying datasets or models. For users to access visuals tied to a model from another workspace, they need to have sufficient permissions on that model, such as Build or Contributor permissions in the source workspace.

2. Cross-Workspace Access: For cross-workspace access, the user’s permissions in the source workspace (Workspace B, in this case) need to allow for model usage. When the user does not have the necessary permissions, they encounter errors because they can't retrieve the data from the external model.

For official documentation, you can refer to:

• Dataset permissions: https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-manage-access-permissions
• Accessing models in different workspaces:https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-roles-new-workspaces

Essentially, for cross-workspace semantic model-based reports, Viewers in the destination workspace need to have appropriate permissions on the dataset in the source workspace.

Please accept this as solution if it helps. Appreciate Kudos.

[gdaniel]

Thanks for the clarification, however this functionality is terrible!  Why even have permissions in Power BI at all if you have to give everyone Contributor role!  I hope Microsoft fixes this asap.  Terrible.  

[Zhongyuan]

Hi @FarhanJeelani , it seems that the link you provided is not working. Could you update it to the latest document?

[FarhanJeelani]

Hi @Zhongyuan, Please click again on same link