Shared workspace with underlying dataset restrictions

[Anonymous]

Hi - I am hoping someone can provide some advice on how I can achieve the below.

• Our business has multiple functional areas producing reports in Power BI (i.e. HR, Finance, Marketing).
• Each functional area operates in their own dedicated workspace.
• The reports produced contain visualisations on metrics across the business that are tracked relevant to each function.
• The underlying dataset for each functional area contains sensitive data which cannot be shared / viewed by other functional areas.

The goal is to create a consolidated dashboard (pinnning tiles to a dashboard) from all the different reports without compromising the sensitive data. As far as I understand pinning to a dashboard from workspaces is not possible.

So we are looking into a shared workspace where we can upload the reports from each functional area and then create the dashboard. A key requirement is for those with access to the shared workspace is to be able to create/pin tiles to dashboard but not have any access to the underlying dataset or be able to adjust permissions. From what I can see in shared workspaces the admin, contributor and member roles will all have access to build permissions and admin/member roles can also change the dataset permissions this wont meet our requirement.

Is there any way to create a shared workspace that restricts any capability to view the underlying dataset no matter what role is assigned? in the workspace setup or sensitivity labels perhaps? or is there another way to achieve the above?

Appreciate any assistance/advice.

Thanks

[v-mengzhu-msft · Accepted solution]

Hi @Anonymous ,

According to your description, you are trying to control the role's access to the dataset? First of all, for workspace roles in power bi, they have their own restrictions and functions. As you said, participant and above roles have permissions to generate datasets and viewer cannot have permissions to datasets unless they are assigned for him.

Roles in workspaces in Power BI - Power BI | Microsoft Docs

So if you want to restrict user access to the dataset, you can set RLS, but note that RLS is only available to viewers, so you need to set all user roles in the shared workspace as viewers and also give them dataset generation permissions (in order to allow them to pin tile), perhaps this will achieve your desired requirements.

About setting RLS and some information about it you can refer to these link:

Row-level security (RLS) with Power BI - Power BI | Microsoft Docs

Restrict data access with row-level security (RLS) for Power BI Desktop - Power BI | Microsoft Docs

Best regards,

Community Support Team Selina zhu

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.