cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Highlighted
Helper I
Helper I

Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

I need to be able to audit who has access to workspaces, apps, reports, and dashboards on a quarterly basis.  Is there a way to pull this information either via powershell or within Power BI itself?  I can't use the azure audit logs since they only look at activity, not potential activity.  I couldn't find a Powershell Cmdlet that pulls members of a workspace, or app.  Please tell me this is feasable, I really don't feel like manually going through everything.

2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
Super User III
Super User III

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

Hi there

There are Power BI Admin APIs which will allow you to get the information you require.

Here is an example of an API that gets all the users in an App Workspace.

Yes this could all be put into a PowerShell script and loop through all the App Workspaces

https://docs.microsoft.com/en-us/rest/api/power-bi/admin/groups_getgroupsasadmin#get_workspaces_with...)




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

View solution in original post

Highlighted
Super User III
Super User III

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

Currently that is not possible.

And in the near future all App Workspaces will be migrated to the V2 App Workspaces, which then will allow you to view the members.




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

View solution in original post

7 REPLIES 7
Highlighted
Super User III
Super User III

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

Hi there

There are Power BI Admin APIs which will allow you to get the information you require.

Here is an example of an API that gets all the users in an App Workspace.

Yes this could all be put into a PowerShell script and loop through all the App Workspaces

https://docs.microsoft.com/en-us/rest/api/power-bi/admin/groups_getgroupsasadmin#get_workspaces_with...)




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

View solution in original post

Highlighted
Helper I
Helper I

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.


@GilbertQ wrote:
Hi there

There are Power BI Admin APIs which will allow you to get the information you require.

Here is an example of an API that gets all the users in an App Workspace.

Yes this could all be put into a PowerShell script and loop through all the App Workspaces

https://docs.microsoft.com/en-us/rest/api/power-bi/admin/groups_getgroupsasadmin#get_workspaces_with...)


It appears that you can only expand the users in the new workspace experience.  Is there a way to get the users for the old workspaces?

 

https://docs.microsoft.com/en-us/rest/api/power-bi/admin/groups_getgroupsasadmin#get_workspaces_with...

Highlighted
Super User III
Super User III

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

Currently that is not possible.

And in the near future all App Workspaces will be migrated to the V2 App Workspaces, which then will allow you to view the members.




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

View solution in original post

Highlighted
Helper I
Helper I

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

 


@GilbertQ wrote:
Currently that is not possible.

And in the near future all App Workspaces will be migrated to the V2 App Workspaces, which then will allow you to view the members.

So, it seems I could use the method above to pull for new workspaces, and then Get-UnifiedGroup for the old workspaces?

Highlighted
Helper I
Helper I

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

@GilbertQ 

 

When I run this command I get the users: Get-PowerBIWorkspace -Scope Organization

 

Capture.2PNG.PNG

 

However when I try to Get-PowerBIWorkspace -Scope Organization -top 50 | ConvertTo-Json the users all show up "as Microsoft.PowerBI.Common.Api.Workspaces.WorkspaceUser"  Is there a way to just keep the users as a json?

 

Capture.PNG

 

 

Highlighted
Helper I
Helper I

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

This seemed to do it

 

Get-PowerBIWorkspace -Scope Organization -top 5000 | ConvertTo-Json -Depth 3



Highlighted
Super User III
Super User III

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

Awesome, thanks for letting us know.




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

Helpful resources

Announcements
Community Conference

Power Platform Community Conference

Check out the on demand sessions that are available now!

Community Conference

Microsoft Power Platform Communities

Check out the Winners!

secondImage

Power Platform 2020 release wave 2 plan

Features releasing from October 2020 through March 2021

Tech Marathon

Maratón de Soluciones de Negocio Microsoft

Una semana de contenido con +100 sesiones educativas, consultorios, +10 workshops Premium, Hackaton, EXPO, Networking Hall y mucho más!

Top Solution Authors