workspace vs report level access / privileges

[BISOLLY]

so does that mean privileges at a certain workspace governs all reports withing the workspace?

example if i modify a users access from Admin  to view for an individual and my goal is for them to not have admin privileges on 3 reports i own withing a workspace, will it affect them across other reports that reside withing the workspace that I do not own?

[SamsonTruong · Accepted solution]

Hi @BISOLLY ,

Priveliges at the workspace level govern what access users have to reports in terms of editing and viewership. What is your intended use case?

If your goal is to restrict who can veiw which reports in a workspace, my recommendation would be to create an app for that workspace and restrict reports through audiences within the app.

If this helped, please mark it as the solution so others can benefit too. And if you found it useful, kudos are always appreciated.

Thanks,

Samson

Connect with me on LinkedIn

Check out my Blog

Going to the European Microsoft Fabric Community Conference? Check out my Session

[Poojara_D12 · Accepted solution]

Hi @BISOLLY 

Yes, in Power BI, access is governed at the workspace level, not at the individual report level. This means that when you change a user’s role in a workspace (for example, downgrading them from Admin to Viewer), the change applies to all content within that workspace—reports, datasets, dashboards, and dataflows—regardless of who created or owns the items. So in your example, if you want a user to lose admin privileges for the three reports you own, you would need to change their role at the workspace level, but that will also remove their admin privileges from every other report or dataset in the same workspace, even if those assets were created by other people. Power BI currently does not allow report-level permissions within a workspace; for more granular sharing, you would need to either use app publishing, where you control which reports are included, or place sensitive reports in a separate workspace and manage access there.

[SamsonTruong · Accepted solution]

Hi @BISOLLY ,

Priveliges at the workspace level govern what access users have to reports in terms of editing and viewership. What is your intended use case?

If your goal is to restrict who can veiw which reports in a workspace, my recommendation would be to create an app for that workspace and restrict reports through audiences within the app.

If this helped, please mark it as the solution so others can benefit too. And if you found it useful, kudos are always appreciated.

Thanks,

Samson

Connect with me on LinkedIn

Check out my Blog

Going to the European Microsoft Fabric Community Conference? Check out my Session

[tayloramy]

Hi @BISOLLY,

That is correct, Workspace permissions apply to all items in the workplace. There is no way to grant someone admin on only one report in the workspace.

If you need more granular control I recommend making a new workspace for this. 

If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution.