We would like to empower our power users by giving them a self-service BI option. The issue now seems to be of compliance.
Just to be clear - I'm not a full fledged PowerBI developer or Administrator. From what I know, there is a MyWorkspace and Several Workspaces for the various environment such as Dev/QA/Stage/Production and eventually PowerBI Apps which the Business Users get to use; the artifacts gets published from Dev to Stage to Prod.
Compliance (Audit Team) is concerned that the Power-Users might make unwarranted change in the DataSets, Reports and Dashboards in the Production WorkSpace (Pointing to the Production Database) and publish these to the Apps which will eventually get consumed.
Can others share how they have addressed it in their respective environments?
For a workspace, you can set users to be one of four types, Admin, Member, Contributor and Viewer. For full details of what each role can do, see here.
What you need to to is set users as read only, they will not be able to edit or change any of the items in the workspace. I would also recommend in the Power BI Admin portal setting a defined group that allows people to download, export to pdf and those sort of options to stop users modifying locally on their Power BI Desktop.
In the workspace overview, that list the items in the workspace, go to the 'Access' option, you will then get a list of the users and their current defined roles and the ability to set them to one of the four roles.
Related
My team plans to build a web platform which gathers data in a DB about different crypto transactions. I am planning to use Power BI to get that data from the db and build some reports which will be embedded into the web platform, reports which will be accessed by users who log in in the web platform.
Is this possible, taking into consideration the following aspects?
I want to apply row level security access so that users who log on the web platform will be able to see only data related to them?
Should I assign a Power BI Pro license to each user who registers the platform in order to be able to see the data or is there any other solution to this?
How often may I set-up data refreshes/updates? 30 minutes?
I am looking to apply row level security access and have users access the reports based on their web platfrom login credentials. Hopefully this is possible. I read something about Power BI Report for Customers using App Owns Data. Is this the right solution?
For the App Owns Data, you will be building a portal on top of an embedded capacity. I assume that you will be using an 'A' Sku.
I want to apply row level security access so that users who log on the
web platform will be able to see only data related to them?
Yes you can use RLS to control what users see what data, in an embedded context . (See here)
Should I assign a Power BI Pro license to each user who registers the
platform in order to be able to see the data or is there any other
solution to this?
No, you don't need a PBI Pro license for each user for your platform, this is handled by the capacity. You'll only need Pro for those who are developing the reports. Your other users, handled by your web portal will be 'read only'.
How often may I set-up data refreshes/updates? 30 minutes?
You can set up the report schedule as normal in the portal, up to 48 times per day with a capacity based Power BI Dataset.
I would take a look at the MS documentation here for more details on the what embedded can do, and also capacity planning for your users.
I work for a small team of developers using Power BI Desktop to create reports for different customers. An increasing number want to pull data from Business Central. I'm also finding they don't want to create an account for me on their tenant but are happy to provide 'guest' access. My question is, when starting a new project for a customer, is my only option to remove all credentials for the Business Central connector and start again with the appropriate ones? Also, if I want to publish to the customer's tenant I cant seem to sign in as myself, so how do I do this? Uploading files directly is possible, but we like to use pbi datasets and then point other reports at these datasets. Trying to upload these files just results in an error.
I recently too premium per user license in power BI to explore its features and capabilities as part of my learning efforts;
By default, there is a workspace existed which is My Workspace; however, I created an additional workspace in the service. As I attempted to nominate /mark "My Workspace -- under premium per user, the relevant options were disabled; and when I attempted the same process with manually created (non-default) workspace, there were options enabled.
Does it indicate that default-workspace (i.e. My Workspace) cannot be marked for permium per user (usage)? Would anyone please help me understand the scenario.
Thank you for giving your valuable time.
You can't flag your 'My Workspace' as a Premium Per User (PPU), or if you have it a PBI Premium Capacity (PPC).
My Workspace is your sandbox to host your reports, and is not suited to sharing reports/dashboards/dataset/dataflows from.
The normal workspaces will have features above your 'My Workspace' capabilities, for example Workspace Apps, Deployment Pipelines and security/user controls.
PPU & PPC are designed for sharing items across users/workspaces/features so it will work with those enhanced features not available in My Workspace.
Just requiring some help and clarification around sharing Power BI apps.
We have an app created inside an EM1 premium capacity workspace, and we are wanting to share the app with user's within our organisation. My understanding is that if the app is published in a premium workspace all user's inside my organisation should be able to view it, providing it is shared with them.
However, only those of us with a pro license are able to view the app. Those with free licenses get a pop up message saying they'll need a pro license. No where online states this, hence my belief any user should be able to see the app.
We have given user's the "Viewer" role within the Power BI workspace, and even tried to give them admin role, neither let them see the app.
Can anyone clear this up/ help please? Many thanks.
Unfortunately "Premium" is a bit of a mess, which isn't quite easy to clearly understand. In this case, you incorrectly assumed that "Premium" EM SKUs will give you rights to share contents with Power BI Free users - this is given only with "Premium" P SKUs. Quote from the original docs:
While there is a lot of overlap in features for the two SKU families, only the P Premium SKU gives free users the ability to consume content hosted in the Premium capacity. EM SKUs are used for embedding content.
If you want this, you must upgrade to P1 SKU (or higher), which is 7-8 times more expensive and comes with annual commitment.
I am a new user of power bi. I am currently using free account of power bi and used share to web feature to share my report publicly.
Using free account i want to share my report with multiple users while stopping my report consumers to re-share the report. If that is not possible using free account then is it possible to buy only one pro account and attain my objective defined above?
Buying multiple pro accounts for each individual is not possible as there would be many consumers of my report. Buying premium account is also not possible as it is too expensive.
The only way to share reports is from Pro User to Pro User, via Workspaces or direct sharing or App. In the sharing options for the report to the other users you can turn off the allow the recipients to share as well. Or you can allow workspace consumers to be read only.
Sharing using the 'Share to Web' function creates a publicly accessible URL, if anyone passes that URL to anyone else, they will be able to see it, and it is NOT secure, and you can't limit/restrict access.
For these use cases, the best solution is to embed the report in an (web) application. Start with Tutorial: Embed Power BI content into an application for your customers.