Restrict Dataset Downloads

[Toast36]

Hi all,

I'm not sure if this is possible or not but can't understand why it would not have been considered if it is not possible.

We have a BI Reporting team who we want to build and Manage datasets which we can release via Power BI Services so that report users can build whatever reports they want to using that SHARED dataset. However we do not want the users building the reports to be able to download a PBIX of the dataset. The reason we do not want them doing this as it would give them the ability to alter the aproved data structure which they would be able to re-upload overwriting the existing Dataset.

The problem that I am having is that if we give permissions in Services so that a user can build their own reports they also seem to have full access to the dataset.

Is there a permission setting somewhere that could be used to prevent this whilst still giving users the ability to see these datasets and build their own reports?

Thanks

Danny

[v-yulgu-msft]

Hi @Toast36,

To disable the .pbix file download option, you could ask the administrator to disable the "Export data" option in admin portal.

Alternatively, you could share dataset and report via content pack. Users can get the published content pack and make a copy of the dataset so that they can create their own report, while any change won't affect the source, the original content pack, or other distribution group members.

Create and publish a Power BI organizational content pack (tutorial)

Organizational content packs: Copy, refresh, and get access

Best regards,

Yuliana Gu

[Toast36]

Thanks @v-yulgu-msft,

I'm not sure that will deliver the functionality that we need.

We want some users to be able to download pbix files but not all users and whilst the content packs may help a bit we want report builders to be able to build within a workspace but without the ability to update or alter how the datasets in that workspace have been built.

It seems that there should be 3 levels of permissions within the workspaces really.

Admin: who can change any thing and manage permissions

Report Builders: who can build reports but not interact with the datasets directly

Memebers: who can read reports but have no ability to alter existing reports or build new reports.

I'm not sure that this level of functionality exists within PowerBI currently and if not it seems to be a major oversight.

[v-yulgu-msft]

Hi @Toast36,

Currently, there are 3 levels of permissions within the workspaces: Admin with full permission, Members with edit permission, Members with read only permission.

While members with edito permission can download .pbix files and re-publish the modified report to overwrite the original one. And the requirement that disabling download permission for some certain people is not supported now.

For your request, you could submit comment at ideas page to make PG be aware of it.

Best regards,

Yuliana Gu

[Toast36]

Thanks @v-yulgu-msft

It feels like this may have been an oversigth when changing the way Free License users could interact with PowerBI Services possibly.