Orphaned workspaces and mail-enabled security group admins

[MarkPalmberg]

I'm trying to avoid listing specific individuals as workspace admins. But when I enter a Mail-enabled security group as the only workspace admin, the workspace becomes orphaned. Do I need to use a different type of security group?

[v-zhangti]

Hi, @MarkPalmberg 

After testing, the workspace becomes Orphaned when the group is listed as the only administrator. It is possible to have at least one member of the group as an administrator at the same time, which is the Active state.

Best Regards,

Community Support Team _Charlotte

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[MarkPalmberg]

Thanks for this additional confirmation, @v-zhangti . So, in a use case where I want to use a group to admin a workspace (so I don't have to worry about individual staff turnover on our reporting team), there's really no point; I may as well list the members of my team individually if I want them to be able to admin a workspace.

[v-zhangti]

Hi, @MarkPalmberg 

You can set up a fixed administrator for managing the workspace. On top of that, it is perfectly fine to add other groups as administrators or members.

Best Regards,

Community Support Team _Charlotte

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[MarkPalmberg]

And where / how do I set up that administrator? Azure AD?

[v-zhangti]

Hi, @MarkPalmberg 

Still add admins here. An administrator account is required, or it can be a regular email account.

Best Regards,

Community Support Team _Charlotte

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[lbendlin]

Nice. Even more reason to raise the ticket if the documentation doesn't match your reality.

[MarkPalmberg]

Thank you, @lbendlin , for taking the time to reply! I appreciate it.

[lbendlin]

this is happening on V2 workspaces? Shared or premium?

[MarkPalmberg]

Yes, V2 workspace, Premium per capacity. I'm a member of the mail-enabled security group I'm trying to use as an admin, so I can still get in and modify access settings after removing my individual account from those settings, but the service is telling me my workspace is orphaned.

[lbendlin]

I don't think Microsoft had anticipated your usage scenario. Assuming you have a Pro license you can consider raising a Pro ticket at https://powerbi.microsoft.com/en-us/support/pro/

[MarkPalmberg]

It sounds like they're describing my scenario here:

https://docs.microsoft.com/en-us/power-bi/collaborate-share/service-new-workspaces

• Use more granular workspace roles for more flexible permissions management in the new workspaces. In classic workspaces, you can add only individuals to the members and admin lists.
• Assign user groups to workspace roles: In the new workspaces, you can add multiple Active Directory security groups, distribution lists, or Microsoft 365 groups to these roles, for easier user management.