Rol in workspaces

[franciscoep]

Please can you help us with the clarification of the following questions for the role configuration in the work areas:
1.If you as a user are assigned a role, by default do you inherit the permissions of that role? , or can I configure the permissions of that role?
2. As a user can I have more than one role?
3. As a user, when I enter the work areas, I see all the work areas or those that correspond to me.

[v-alq-msft · Accepted solution]

Hi, @franciscoep 

1.If you as a user are assigned a role, by default you will inherit the permissions of that role. In classic workspaces, you can add only individuals to the members and admin lists. In the new workspaces, you can add multiple Active Directory security groups, distribution lists, or Microsoft 365 groups to these lists, for easier user management.

2. A user can only have one role in a workspace.

3. A user will see the corresponding workspaces where he has a role.

Here are the capabilities of the four roles in new workspaces: admins, members, contributors, and viewers. All of these capabilities, except viewing and interacting, require a Power BI Pro license.

Capability	Admin	Member	Contributor	Viewer
Update and delete the workspace.	X
Add/remove people, including other admins.	X
Add members or others with lower permissions.	X	X
Publish and update an app.	X	X
Share an item or share an app.1	X	X
Allow others to reshare items.1	X	X
Feature apps on colleagues' Home	X	X
Feature dashboards and reports on colleagues' Home	X	X	X
Create, edit, and delete content in the workspace.	X	X	X
Publish reports to the workspace, delete content.	X	X	X
Create a report in another workspace based on a dataset in this workspace.1	X	X	X
Copy a report.2	X	X	X
Schedule data refreshes via the on-premises gateway.3	X	X	X
Modify gateway connection settings.3	X	X	X
View and interact with an item.4	X	X	X	X
Read data stored in workspace dataflows	X	X	X	X

For further inforamtion, you may refer Organize work in the new workspaces in Power BI .

Best Regards

Allan

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[GilbertQ]

Hi there

A user can only be part of a single role.

And each App Workspace is separate from other App Workspaces, so you would either need to add the user to a role in each app workspace. Or add in an AD group with the associated role into each app workspace.