Forum Discussion
Workspace Security
- 8 months ago
Hi DKHUghes55,
Yes, it is possible to identify which workspaces a user or security group has access to, but this cannot be done directly in Power BI Desktop. There are two main approaches:
Option 1 โ Power BI Service Admin Portal
If you have Power BI Admin permissions, you can:- Access the Admin Portal.
- Navigate to Workspaces.
- Export the complete list of workspaces and their associated users or groups.
- Use the Export to CSV feature for further analysis.
Limitation: This is only available to tenant administrators.Option 2 โ Power BI REST API
For an automated and scalable solution:- Use the endpoint:
GET https://api.powerbi.com/v1.0/myorg/groups
- This returns all workspaces.
- For each workspace, retrieve the members:
GET https://api.powerbi.com/v1.0/myorg/groups/{groupId}/users
Combine the results to obtain a complete list of workspaces per user or group.
Prerequisites:- Register an application in Azure Active Directory.
- Grant permissions to the Power BI API.
- Authenticate using OAuth2.
Official Documentation:If this response was helpful in any way, Iโd gladly accept a ๐much like the joy of seeing a DAX measure work first time without needing another FILTER.
Please mark it as the correct solution. It helps other community members find their way faster (and saves them from another endless loop ๐.
- 8 months ago
Hi DKHUghes55 ,
Thank you for reaching out to Microsoft Fabric Community.
Thank you Zanqueta for the prompt response.
Yes, you can identify which workspaces a user or group has access to, but a few clarifications are important:
The Admin Portal does not provide a direct export of users/groups per workspace or a list of workspaces for a specific user-you can only check access one workspace at a time.Power BI also doesnโt offer a single API that returns "workspaces for User X"; you need to list all workspaces and then check members for each.Tenant-wide results are only available if you are a Power BI Admin or a service principal with Admin permissions-otherwise the API shows only workspaces you can access.For admins, PowerShell is often the easiest option: Get-PowerBIWorkspace -All ,Get-PowerBIWorkspaceUser.API and PowerShell output will include users, security groups, M365 groups, and service principals.
Hi DKHUghes55 ,
May I ask if you have resolved this issue? Please let us know if you have any further issues, we are happy to help.
Thank you.