Assign workspace roles – Deploy and maintain assets

Assign workspace roles

You can see the list of users who have access to a workspace by selecting Access from the workspace, where you can also add or remove users. To reflect the different needs of users, Power BI offers four workspace roles:

• Viewers can
  • View dashboards, reports, and workbooks in the workspace.
  • Read data from dataflows in the workspace.
• Contributors can do everything that viewers can do and
  • Add, edit, and delete content in the workspace.
  • Schedule refreshes and use the on-premises gateway within the workspace.
  • Feature dashboards and reports from the workspace.
• Members can do everything that contributors can do and
  • Add other users as members, contributors, or viewers to the workspace.
  • Publish and update the workspace app.
  • Share and allow others to reshare items from the workspace.
  • Feature the workspace app.
• Admins can do everything that members can do and
  • Update and delete the workspace.
  • Add and remove other users of any role from the workspace.

As mentioned earlier in the chapter, there’s a workspace setting that allows contributors to update apps. This setting can be useful when you want a user to be able to update an app but not add other users to the workspace.

Note that giving someone a role in a workspace does not remove the need to give them additional rights. For example, you may make a user an admin of a workspace, but unless they have a Power BI Pro license, they won’t be able to fully use the role.

Important Row-Level Security

Row-level security applies only to viewers since all other roles have full access to all datasets within a workspace.

Exam Tip

You should know which role is appropriate for a user based on the business requirements. In most cases, you should follow the principle of least privilege.