What can a user see with View access to a semantic model?

[user10456]

From https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-permissions, the Viewer role gives the Read permission, which "Allows user to access reports and other solutions, such as composite models on Premium/PPU workspaces, that read data from the semantic model" and "Allows user to view semantic model settings". It doesn't grant the Build permission, which "Allows user to see hidden data fields", "Allows user to pull the data into Analyze in Excel" and "Allows user to build new content from the semantic model, as well as find content that uses the semantic model".

Which of the following can a person do with the Viewer role for a semantic model?

• Download a .pbix file for the model
• View the table names and table relationships
• View the column names and measure names
• View the definitions or properties for measures and for any calculated columns
• Use the Analyse in Excel option

I assume the answer to the last question is no, bsed on the above and also on https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-roles-new-workspaces. I am asking because this help page about Build permissions https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-build-permissions says "Read permission already grants them the right to build new content on the semantic model by using Analyze in Excel or Export" - I want to confirm that this is incorrect.

(Edit: removed comma from first link)

[lbendlin]

Build permissions are kinda separate from workspace roles and are more tied to app permissions

Build permission for shared semantic models - Power BI | Microsoft Learn

To answer your question you would need to clarify if you mean workspace viewer role or app read access role.

[user10456]

@lbendlin I intend to give some users the Viewer role on a workspace, and the workspace doesn't have an app.

[lbendlin]

Then the build permissions are not relevant. Your link to workspace roles list the available options. My guess would be "View Column names and Measure names"

[user10456]

The page I linked says "Read permission already grants them the right to build new content on the semantic model by using Analyze in Excel or Export". Do you think that is incorrect?

[lbendlin · Accepted solution]

We investigated and this is what we found. Please chack on your side.

Viewer Access @ workspace level:
- cannot see dataflows
- cannot see semantic models
- can open Report in the service straight from the workspace
- Analyze in Excel is greyed out
- the Download this file option is active but download errors out with Can't export to Power BI Desktop format; you only get the option to download a copy of the report with a live connection (report and data is greyed out) but it errors out anyway
- cannot connect to dataset via Excel > Get Data > Power Platform >

[owen-carnes-sps]

Thanks for this investigation.  Do you know of a way to keep a user as Viewer in the workspace, but allow them to see the semantic model?  Even giving them Build access on the semantic model doesn't seem to allow them to see it within the Fabric Web UI.