Workspaces -Not sharing Gateway

[ringovski]

Hi All,

I have setup a on premise data gateway and configured with the reports which refresh correctly.

My issue is I don't want users who publish reports to workspace A which has permissions to the gateway to then be able to publish the same reports to a workspace B and still be able to refresh the reports. I have tested it with users accounts and they share across workspaces.

In the admin portal tentant settings I have tried disabling 'use data sets across workspace' but this doesn't work.

What is the suggested solution for this?

Thanks

[v-sgandrathi]

Hi @ringovski,

Thank you @Akash_Varuna for your response regarding the issue. Mostly, those workarounds work in this scenario. Additionally, I have points to add that may help in resolving the issue.

Users with Build Permissions on a dataset in Workspace A can reuse it in other workspaces. To prevent this, remove their Build Permissions in Workspace A.

As Community member mentioned allow only specific admins to publish datasets in Workspace A and restrict access by removing unnecessary contributors and members. Implement Row-Level Security (RLS) to control data visibility even if the dataset is shared.

Instead of using a single gateway for multiple workspaces, configure a separate gateway for each workspace.This prevents datasets in Workspace A from being accessed in Workspace B.

Glad I could assist! If this answer helped resolve your issue, please mark it as Accept as Solution and give us Kudos to guide others facing the same concern.

Regards,
Sahasra.

[ringovski]

Thanks for the reply, where do I find the build permissions? I see user, user with share & admin.

[v-sgandrathi · Accepted solution]

Hi @ringovski,
Thanks for reaching out to the Microsoft Fabric Community forum.

In Microsoft Fabric, go to the workspace where the dataset is located, click on 3 dots next to the dataset, and select Manage permissions to view and modify Build Permissions.

In the Permissions tab, click 3 dots next to a user's name, check for Build Permission, and remove or adjust their role as needed.

If this solution worked for you, kindly mark it as Accept as Solution and feel free to give a Kudos, it would be much appreciated!


Regards,
Sahasra.

[Akash_Varuna]

Hi @ringovski 

• Separate Gateways: Assign different gateways to each workspace and restrict data source access to specific users.

• Restrict Dataset Sharing: In Admin Portal > Tenant Settings, disable Allow users to share datasets across workspaces to stop cross-workspace sharing.

• Implement RLS (Row-Level Security): Use RLS to ensure data access is restricted based on user roles, even if datasets are accessed across workspaces.

• Restrict Data Source Permissions: In Manage Gateways, limit data source access to specific users for each workspace.

• Monitor Logs: Use Audit Logs to track unauthorized gateway usage.

[ringovski]

Hi, Thanks for the reply. I already changing the tenant settings is there something else that has to be done for it to work?