cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Highlighted
Helper I
Helper I

Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

I need to be able to audit who has access to workspaces, apps, reports, and dashboards on a quarterly basis.  Is there a way to pull this information either via powershell or within Power BI itself?  I can't use the azure audit logs since they only look at activity, not potential activity.  I couldn't find a Powershell Cmdlet that pulls members of a workspace, or app.  Please tell me this is feasable, I really don't feel like manually going through everything.

2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
Super User IV
Super User IV

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

Hi there

There are Power BI Admin APIs which will allow you to get the information you require.

Here is an example of an API that gets all the users in an App Workspace.

Yes this could all be put into a PowerShell script and loop through all the App Workspaces

https://docs.microsoft.com/en-us/rest/api/power-bi/admin/groups_getgroupsasadmin#get_workspaces_with...)




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

View solution in original post

Highlighted
Super User IV
Super User IV

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

Currently that is not possible.

And in the near future all App Workspaces will be migrated to the V2 App Workspaces, which then will allow you to view the members.




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

View solution in original post

7 REPLIES 7
Highlighted
Super User IV
Super User IV

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

Hi there

There are Power BI Admin APIs which will allow you to get the information you require.

Here is an example of an API that gets all the users in an App Workspace.

Yes this could all be put into a PowerShell script and loop through all the App Workspaces

https://docs.microsoft.com/en-us/rest/api/power-bi/admin/groups_getgroupsasadmin#get_workspaces_with...)




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

View solution in original post

Highlighted
Helper I
Helper I

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.


@GilbertQ wrote:
Hi there

There are Power BI Admin APIs which will allow you to get the information you require.

Here is an example of an API that gets all the users in an App Workspace.

Yes this could all be put into a PowerShell script and loop through all the App Workspaces

https://docs.microsoft.com/en-us/rest/api/power-bi/admin/groups_getgroupsasadmin#get_workspaces_with...)


It appears that you can only expand the users in the new workspace experience.  Is there a way to get the users for the old workspaces?

 

https://docs.microsoft.com/en-us/rest/api/power-bi/admin/groups_getgroupsasadmin#get_workspaces_with...

Highlighted
Super User IV
Super User IV

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

Currently that is not possible.

And in the near future all App Workspaces will be migrated to the V2 App Workspaces, which then will allow you to view the members.




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

View solution in original post

Highlighted
Helper I
Helper I

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

 


@GilbertQ wrote:
Currently that is not possible.

And in the near future all App Workspaces will be migrated to the V2 App Workspaces, which then will allow you to view the members.

So, it seems I could use the method above to pull for new workspaces, and then Get-UnifiedGroup for the old workspaces?

Highlighted
Helper I
Helper I

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

@GilbertQ 

 

When I run this command I get the users: Get-PowerBIWorkspace -Scope Organization

 

Capture.2PNG.PNG

 

However when I try to Get-PowerBIWorkspace -Scope Organization -top 50 | ConvertTo-Json the users all show up "as Microsoft.PowerBI.Common.Api.Workspaces.WorkspaceUser"  Is there a way to just keep the users as a json?

 

Capture.PNG

 

 

Highlighted
Helper I
Helper I

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

This seemed to do it

 

Get-PowerBIWorkspace -Scope Organization -top 5000 | ConvertTo-Json -Depth 3



Highlighted
Super User IV
Super User IV

Re: Quarterly audit for user access to Workspaces, Apps, dashboards, and reports.

Awesome, thanks for letting us know.




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

Helpful resources

Announcements
Community Conference

Power Platform Community Conference

Find your favorite faces from the community presenting at the Power Platform Community Conference!

Upcoming Events

Experience what’s next for Power BI

See the latest Power BI innovations, updates, and demos from the Microsoft Business Applications Launch Event.

secondImage

Power Platform 2020 release wave 2 plan

Features releasing from October 2020 through March 2021

Get Ready for Power BI Dev Camp

Get Ready for Power BI Dev Camp

Mark your calendars and join us for our next Power BI Dev Camp!.

Top Solution Authors