Roles let you manage who can do what in Workspaces, so teams can collaborate.
To grant access to a new Workspace, assign those user groups (preferable) or individuals to one of the Workspace roles: Admin, Member, Contributor, or Viewer. Everyone in a user group gets the role you've assigned. If someone is in several user groups, they get the highest level of permission provided by the roles they're assigned. If you nest user groups, all the contained users have permission. All of these capabilities, except viewing and interacting, require a Power BI License.
| Capability | Admin | Member | Contributor | Viewer |
|---|---|---|---|---|
| Update and delete the Workspace. | ||||
| Add/remove people, including other admins. |  | |||
| Add members or others with lower permissions. | | | ||
| Publish and update an app. | | | ||
| Share an app. | | | ||
| Allow others to reshare items. | | | ||
| Feature apps on colleagues' Home | | | ||
| Feature dashboards and reports on colleagues' Home | | | | |
| Create, edit, and delete content in the Workspace. | | | | |
| Publish reports to the Workspace, delete content. | | | | |
| Create a report in another Workspace based on a dataset in this Workspace.1 | | | | |
| Copy a report.1 | | | | |
| View and interact with an item.2 | | | | |
| Read data stored in Workspace dataflows | | | | |
1 To copy a report, and to create a report in another Workspace based on a dataset in this Workspace, you need Build permission for the dataset. For datasets in this Workspace, the people with Admin, Member, and Contributor roles automatically have Build permission through their Workspace role.
2 Even if you don't have a Power BI Pro license, you can view and interact with items in the Power BI service if the items are in a Workspace in a Premium capacity.
- You can assign users to roles, either alone or in a group, even if they can't use the role. In other words, you can assign users who don't have Power BI Pro licenses to a role that requires a license. See Licenses in this article for details.
- To enforce row-level security (RLS) for users browsing content in a Workspace, use the Viewer role. You can also enforce RLS without giving access to the new Workspace. Publish an app and distribute it to those users, or use sharing to distribute content to them.
HELP IS AT HAND!
Question, comment, critique? We are here to help and we strive to make our site a comprehensive, user friendly experience. Contact us at DARTS@maine.edu.
