Earn the coveted Fabric Analytics Engineer certification. 100% off your exam for a limited time only!
Is there a way to setup a user who can create reports (from datasets) and create and share dashboards, but not make any changes to datasets or to any existing reports/dashboards that they didn't create?
Currently, the only way I know to allow users to create reports is to add them to the admin group, which gives them full access to everything, including existing datasets/reports/etc. It also bypasses any RLS. I'm looking for a way to create a user who is limited by RLS but can also create reports off of existing datasets without being able to modify anything existing objects.
Solved! Go to Solution.
One Way to achieve this is
Create a Workspace A whare your datamodel is available - you can set RLS here.
Create a Workspace B and give Contributor access to the person whom you would like to author the reports. This person can use the Shared Dataset from Workspace A and publish / edit the reports in Workspace B. He doesn't have to touch the underlying datamodel in Workspace A.
You can also go through the blog post below for more info :
https://community.powerbi.com/t5/Community-Blog/How-to-Protect-a-Dataset-from-Deletion/ba-p/818685
Thanks,
Nishanth.
One Way to achieve this is
Create a Workspace A whare your datamodel is available - you can set RLS here.
Create a Workspace B and give Contributor access to the person whom you would like to author the reports. This person can use the Shared Dataset from Workspace A and publish / edit the reports in Workspace B. He doesn't have to touch the underlying datamodel in Workspace A.
You can also go through the blog post below for more info :
https://community.powerbi.com/t5/Community-Blog/How-to-Protect-a-Dataset-from-Deletion/ba-p/818685
Thanks,
Nishanth.
OK, it looks like this is going to work. I had to upgrade my workspace first (since I was still using the classic workspaces), but once I did that, I was able to create a Report in the "Contributor" workspace that was based off of a Dataset in my main workspace and the user could only create reports from that Dataset without modifying or deleting the main Dataset.
Edit: I should add that in order for this to work, you have to go to each Dataset in the "source" Workspace and grant this "Contributor" access to that dataset (using "Manage Permissions"), and make sure you check the box that grants them "build" access when you do.