Forum Discussion
Helper IVquestions about semantic model permission
we have a workspace with many semantic models, and we would like to grant contributor access right in workspace to user, allowing them to use the semantic models to build reports.
refer to Roles in workspaces in Power BI - Power BI | Microsoft Learn
Contributor has right to publish/update refresh schedule/modify gateway connection/edit or write semanitc models
But we have some questions:
1. how to disable contributor to edit/update the semantic model?<the semantic model should only be allowed to updated by IT team>
2. how to disbale contributor update the refresh schedule and modify gateway connection? <refresh schedule and gateway should be maintain by IT Team>
Hi pennyhoho117,
Thank you for reaching out to Microsoft Fabric Community.
There is no direct way to restrict Contributors from editing/updating the semantic model or modifying the refresh schedule and gateway connection while keeping them as Contributors in the same workspace.
If you want the users to use the semantic models to build reports without modifying them, assign "Viewer" role at the workspace level, this prevents them from editing semantic models, refresh schedules, or the gateway. Manually grant "Build" permission on specific semantic models, this allows them to use the dataset in reports but not edit it.
Please note that by removing the Contributor role and assigning only the Viewer role, the user will lose other Contributor-level permissions (for e.g. ability to publish reports to the workspace).
If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!
Thanks and regards,
Anjan Kumar Chippa
Hi pennyhoho117,
Yes, this is the expected behaviour. We cannot see the semantic model. But we can access the semantic model and build reports from power bi desktop.
Go to power bi desktop --> Get data --> Power BI semantic models, from here we can see and be able to select the dataset to build reports.If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!
Thanks and regards,
Anjan Kumar Chippa
6 Replies
v-achippaCommunity Support
Hi pennyhoho117,
Thank you for reaching out to Microsoft Fabric Community.
There is no direct way to restrict Contributors from editing/updating the semantic model or modifying the refresh schedule and gateway connection while keeping them as Contributors in the same workspace.
If you want the users to use the semantic models to build reports without modifying them, assign "Viewer" role at the workspace level, this prevents them from editing semantic models, refresh schedules, or the gateway. Manually grant "Build" permission on specific semantic models, this allows them to use the dataset in reports but not edit it.
Please note that by removing the Contributor role and assigning only the Viewer role, the user will lose other Contributor-level permissions (for e.g. ability to publish reports to the workspace).
If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!
Thanks and regards,
Anjan Kumar Chippa
pennyhoho117hi
Thanks for your reply,
but we tried to grant Workspace Viewer and Semantic Model :build to users
they cannot see the semantic model in worksapce, it is normal?
they only can see reports in the workspace.
- v-achippa
Hi pennyhoho117,
Yes, this is the expected behaviour. We cannot see the semantic model. But we can access the semantic model and build reports from power bi desktop.
Go to power bi desktop --> Get data --> Power BI semantic models, from here we can see and be able to select the dataset to build reports.If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!
Thanks and regards,
Anjan Kumar Chippa