Workspaces serve as logical containers in which we can store dashboards, reports, workbooks, datasets, and dataflows. So far, we have only worked with a single report and dataset. But workspaces can contain dozens or even hundreds of different dashboards, reports, workbooks, datasets, and dataflows. Assigning security at the workspace level provides access to all of the objects within the workspace. This means that workspace access should only be assigned to individuals or groups of individuals that should see everything that is published or could be published to the workspace.
To assign workspace permissions, perform the following steps:
- In the Navigation pane, click on the name of the workspace, which, in this case, is LearnPowerBI. This changes the canvas to display the workspace interface.
- Click the Access link in the ribbon of the workspace interface. The Access dialog will be displayed, as shown in the following screenshot:
- Similar to sharing a report, email addresses can be entered in the Enter email addresses field. Azure AD groups can be assigned as well as individuals.
- Users can be assigned four different security roles for the workspace. These roles are as follows:
- Viewer
- Contributor
- Member
- Admin
The Viewer role provides the following permissions:
- View items within the workspace
The Contributor role includes all of the Viewer role permissions, plus the following permissions:
- Publish reports to the workspace and delete content
- Create, edit, and delete content in the workspace
The Member role includes all of the Contributor and Viewer role permissions, plus the following permissions:
- Allow others to reshare items
- Share an item or share an app
- Publish and update an app
- Add members or others with lower permissions
The Admin role includes all of the Member, Contributor, and Viewer role permissions, plus the following permissions:
- Add/remove people, including other admins
- Update and delete the workspace
By default, the creator of a workspace is assigned the Admin role.
- Once some email addresses have been entered and a role has been chosen, click the Add button.
- When finished, click the Close button to close the Access dialog.