Power BI Premium Capacity workspace-based isolation

[Anonymous]

Hi ! Hope everyone is having a great day. 

My organization has a P1 premium capacity. We plan to act as a shared "BI Service" across our group of companies. The plan is to roll it out to each org where they in turn can develop content (not limited to embedded) for their respective customers. (Data isolation in the org level and their customer levels are crucial) 

Org	Customer
A	x
A	y
B	p
B	q
B	r
C	s

As per my understanding, what I suggested was creating a separate workspace for each customer (x,y,z) and handing over workspace admin access to the respective sister company (A,B,C) BI team. 

I am unclear as to how data isolation is implemented within the Org level. Each Org will have separate databases. Would this isolation be down to the fact that each Org will not know the DB credentials of a peer org and would not have access to peer Org owned workspaces ? 

Thanks in advance !

~Warren

[v-janeyg-msft · Accepted solution]

Hi,  @Anonymous 

According to your description, Each team admin manage different workspaces. As long as they are not in other workspaces, they can't access other workapsces' content.

As for the database credentials you mentioned, I think whether you can access it depends on how you set the database permissions(underlying data source), which has nothing to do with the permissions in powerbi.

If you have other questions, please feel free to ask me.

Best Regards

Janey Guo

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.