Power BI "Admin Monitoring" workspace permissions

[AAAA]

The new Power BI Admin Monitoring (preview) report/workspace access control contains 2 groups, as per image bellow. 

Where can we find them? Who managed them? I tried looking in AAD but could not find them ..

Thank you

Miguel

[bogdanblaga · Accepted solution]

@AAAA these are not typical AD groups, in this case they are designated for the Admin Monitoring workspace only.

The first group is an "admin" but this is not tied to any AD user or group, it is a system admin which becomes the workspace and report/dataset owner. This is by-design requirement for all workspaces and report/datasets to have an owner.  

In this case, the workspace is read-only so the highest role will be Member only (with read-only rights and with build/reshare), for the tenant admins.

So the second group is the list of all current Power BI and Fabric Tenant Admins, based on AD roles at the specified point in time. So if a user is granted this role in AD, they will be automatically included in this group below and see the Admin Monitoring Workspace and with build/reshare permissions for all items. 

[v-yueyunzh-msft]

Hi , @AAAA 

According to your description, you are using the "Admin monitoring" feature.

For your question,this is my understand:
This workspace will only be created by default to the tenant admins, although they can further share the workspace access to other users.And this worksapce is created by the Microsoft to modify the admin management.

For the workspace, it will generate the corresponding role by default. My understanding is that Microsoft is used to maintain role permissions, and changes are not allowed.

The admin Monitoring workspace is a read-only workspace. Users, including workspace admins, are not able to edit or view properties of the items in the workspace, including datasets and reports.

And the admin can give permission for other users to have access to the workspace.

By another , The admin monitoring workspace is automatically refreshed once a day.

For this , you can also refer to the document:
What is the admin monitoring workspace? - Microsoft Fabric | Microsoft Learn

Thank you for your time and sharing, and thank you for your support and understanding of PowerBI! 

Best Regards,

Aniya Zhang

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly