cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
WATYF
Frequent Visitor

Setting up user who can create reports/dashboards but not edit datasets...

Is there a way to setup a user who can create reports (from datasets) and create and share dashboards, but not make any changes to datasets or to any existing reports/dashboards that they didn't create?

 

Currently, the only way I know to allow users to create reports is to add them to the admin group, which gives them full access to everything, including existing datasets/reports/etc. It also bypasses any RLS. I'm looking for a way to create a user who is limited by RLS but can also create reports off of existing datasets without being able to modify anything existing objects.

1 ACCEPTED SOLUTION
NishanthV
Resolver II
Resolver II

One Way to achieve this is 

 

Create a Workspace A whare your datamodel is available - you can set RLS here.

 

Create a Workspace B and give Contributor access to the person whom you would like to author the reports. This person can use the Shared Dataset from Workspace A and publish / edit the reports in Workspace B. He doesn't have to touch the underlying datamodel in Workspace A.

 

You can also go through the blog post below for more info : 

https://community.powerbi.com/t5/Community-Blog/How-to-Protect-a-Dataset-from-Deletion/ba-p/818685

 

Thanks,

Nishanth.

View solution in original post

2 REPLIES 2
NishanthV
Resolver II
Resolver II

One Way to achieve this is 

 

Create a Workspace A whare your datamodel is available - you can set RLS here.

 

Create a Workspace B and give Contributor access to the person whom you would like to author the reports. This person can use the Shared Dataset from Workspace A and publish / edit the reports in Workspace B. He doesn't have to touch the underlying datamodel in Workspace A.

 

You can also go through the blog post below for more info : 

https://community.powerbi.com/t5/Community-Blog/How-to-Protect-a-Dataset-from-Deletion/ba-p/818685

 

Thanks,

Nishanth.

View solution in original post

WATYF
Frequent Visitor

OK, it looks like this is going to work. I had to upgrade my workspace first (since I was still using the classic workspaces), but once I did that, I was able to create a Report in the "Contributor" workspace that was based off of a Dataset in my main workspace and the user could only create reports from that Dataset without modifying or deleting the main Dataset.

 

Edit: I should add that in order for this to work, you have to go to each Dataset in the "source" Workspace and grant this "Contributor" access to that dataset (using "Manage Permissions"), and make sure you check the box that grants them "build" access when you do.

Helpful resources

Announcements
PBI User Groups

Welcome to the User Group Public Preview

Check out new user group experience and if you are a leader please create your group!

MBAS on Demand

Microsoft Business Applications Summit sessions

On-demand access to all the great content presented by the product teams and community members! #MSBizAppsSummit #CommunityRocks

MBAS Attendee Badge

Claim Your Badge & Digital Swag!

Check out how to claim yours today!

secondImage

Are You Ready?

Test your skills now with the Cloud Skills Challenge.

Top Solution Authors
Top Kudoed Authors