How to Check Power BI User Access

Knowing who has access to your Power BI reports and dashboards is critical for data security and efficient license management. It ensures that sensitive information is only seen by authorized people and that your resources are used effectively. This article will walk you through several methods for checking Power BI user access, from simple point-and-click checks within the service to more advanced auditing and scripting techniques.

Graphed

Still Building Reports Manually?

Watch how growth teams are getting answers in seconds — not days.

Watch the Demo

Why Monitoring Power BI Access is So Important

Before jumping into the "how," it's helpful to understand the "why." Regularly auditing user permissions isn't just a box-ticking exercise, it's a foundational part of responsible data governance. The three main reasons it's essential are security, cost, and usability.

Security and Data Compliance

Your reports and dashboards often contain sensitive or confidential business data - financial summaries, sales performance, customer details, and strategic key performance indicators (KPIs). Uncontrolled access can lead to data breaches. If someone who has left the company or switched roles still has access, that's a significant security risk. For regulated industries, maintaining a clear audit trail of who can see what is a non-negotiable part of compliance standards like GDPR, HIPAA, or CCPA.

Cost Optimization and License Management

Most organizations use Power BI Pro or Premium Per User (PPU) licenses, which come with a monthly cost per user. When employees leave the company or no longer require access to features that require a particular premium license, those licenses can be reallocated or deactivated. Without regular checks, you could be paying for licenses for dozens of inactive users, leading to unnecessary spending. Monitoring access helps you understand who is actively using Power BI, ensuring you only pay for the licenses you truly need.

Graphed

Still Building Reports Manually?

Watch how growth teams are getting answers in seconds — not days.

Watch the Demo

Ensuring 'Just Right' Permissions

Permissions issues cut both ways. Too much access is a security risk, but too little access prevents your team from doing their jobs. If a marketing manager can't see the latest campaign performance report or a sales leader is blocked from viewing their team's pipeline dashboard, it creates friction and delays. Regularly checking permissions helps you confirm that everyone has the access they need - and nothing more, following the principle of least privilege.

Method 1: Check Permissions in the Power BI Service Interface

For quick, everyday checks of a specific workspace, report, or app, the Power BI service provides a user-friendly way to see who has access without needing admin privileges (assuming you are at least a 'Member' or 'Admin' of the workspace).

Checking Workspace Access

A Power BI Workspace is the primary collaboration and content-sharing container. Access is granted at the workspace level through four distinct roles:

• Admin: Can do everything, including adding/removing other admins, members, contributors, and viewers. Can also modify/delete the workspace.
• Member: Can edit reports, interact with them, publish new items, and reshare existing reports and dashboards.
• Contributor: Can publish reports and interact with existing ones. However, a contributor cannot re-share their content with others.
• Viewer: Can only view and interact with content (e.g., use filters, slicers). They cannot modify or share anything.

To check who has access to a workspace:

1. Navigate to the Power BI service (app.powerbi.com).
2. From the left-hand navigation pane, select Workspaces and find the workspace you want to check.
3. Click the three dots (...) next to the workspace name and select Workspace access.
4. A side panel will appear, listing all individuals and user groups with access and their assigned roles. From here, you can add or remove users or modify their roles.

Checking Report and Dashboard Access

Users can be granted access to specific reports or dashboards without being part of the workspace. This is often done through the "Share" button and is referred to as direct access or item-level sharing.

To see who a report has been shared with:

1. Open the specific report or dashboard you want to check.
2. In the top menu, click the Share icon.
3. In the dialog box that appears, click the three dots (...) and select Manage permissions.
4. This opens the management pane. The Direct access tab will show you a list of individuals and groups who were granted permission directly. It also shows the type of permission they have, such as "Read," "Read and Reshare," or "Build."

You'll also see a Links tab, which shows any sharing links that have been created, specifying who the link works for (e.g., "People in your organization").

Checking Power BI App Audience Access

If you're distributing content through a Power BI App, permissions work differently. An app bundles reports and dashboards into a clean, easy-to-use package, and you manage access through "audiences."

1. Go to the workspace containing the content for your app.
2. In the top right, click the Update app button.
3. Navigate to the Audience tab.
4. Here, you'll see a list of audiences you've created. Click on an audience name to see the specific Microsoft 365 groups or individuals who have been granted access to that view of the app. This is the most effective way to see exactly who can view the content packaged in your Power BI app.

Graphed

Still Building Reports Manually?

Watch how growth teams are getting answers in seconds — not days.

Watch the Demo

Method 2: Use the Microsoft 365 Audit Log

Instead of proactively viewing users with a certain 'View' permission setting, an alternative approach is to focus on a user's logged activity. This activity can be filtered for view events for a user across different reports inside of a specific dataset or across your entire workspace. For a more comprehensive look at what users are actually doing, not just what they can do, the unified audit log in the Microsoft Purview compliance portal is your best bet. This method requires Power BI administrator or Global administrator privileges.

The audit log records activities like "ViewReport," "ExportReport," "ShareDashboard," etc. It provides a detailed chronological history of user actions across your Power BI tenant.

How to Access the Audit Log for Power BI:

1. As an admin, go to the Power BI service and click the Settings gear icon in the top right.
2. Select Admin portal.
3. Click on Audit logs from the list.
4. This will provide a link to the Microsoft 365 Admin Center, where the audit logs are stored. Click Go to Microsoft 365 Admin Center.

Inside the Purview compliance portal, you can search the audit log. Filter by date range and specify Power BI activities under the "Activities" search field. Searching for an event like "Viewed Power BI report" and filtering by user or report name can tell you exactly when someone accessed a specific asset.

Note: The audit log is excellent for historical analysis and security investigations but isn't built for a quick, real-time snapshot of current permissions. It shows you who has accessed content, which is different from who can access it.

Method 3: Leverage PowerShell and the Power BI API

For Power BI admins or developers who need to check permissions across many workspaces and reports at once, automating the process with PowerShell is the most efficient option. This method allows you to script access checks, export the results to a CSV, and manage permissions at scale.

Getting Started with PowerShell for Power BI

First, you need to install the Power BI management module on your machine. Open a PowerShell window as an administrator and run:

Install-Module -Name MicrosoftPowerBIMgmt

Next, you'll need to connect to your Power BI account:

Connect-PowerBIServiceAccount

This will open a login window for you to authenticate.

Graphed

Still Building Reports Manually?

Watch how growth teams are getting answers in seconds — not days.

Watch the Demo

Useful Scripts for Checking Access

Once connected, you can use various commands to retrieve access information.

Get All Users in a Specific Workspace

To list every user and their role in a single workspace, you'll first need the Workspace ID. You can find this in the URL of the workspace (e.g., app.powerbi.com/groups/workspaceID/...).

Get-PowerBIWorkspace -Id "YOUR_WORKSPACE_ID" -Include Users | Select-Object -ExpandProperty Users

This command returns a clean list showing each user's email, assigned role, and access type (e.g., User, Group).

Get Users with Direct Access to a Report

To audit who has direct, item-level access to a specific report, you can use the Get-PowerBIReportUser command. You'll need the Workspace ID and the Report ID (also found in the URL when you have the report open).

Get-PowerBIReportUser -WorkspaceId "YOUR_WORKSPACE_ID" -ReportId "YOUR_REPORT_ID"

While this method has a steeper learning curve, it provides unmatched power and flexibility for bulk auditing and reporting on permissions across your entire Power BI environment.

Best Practices for Access Management

Knowing how to check access is only half the battle. Following these best practices will make managing permissions far easier and more secure.

• Use Groups, Not Individuals: Whenever possible, manage permissions using Microsoft 365 or Security Groups instead of adding individual users. When someone joins or leaves a team, you only need to update the group membership once, and their access to all associated Power BI content is updated automatically.
• Follow the Principle of Least Privilege: Always grant users the minimum level of access they need. Most business users are information consumers who only require 'Viewer' roles in workspaces or access to a curated App.
• Conduct Regular Access Reviews: Set a recurring reminder (e.g., quarterly) for workspace admins and content owners to review the list of users with access. Remove anyone who has changed roles or left the company.
• Prefer Apps Over Workspaces for Distribution: For broad distribution of content, Power BI Apps are superior. They provide a clean, brandable consumption experience without giving users access to the underlying workspace where datasets and reports are being actively developed.

Final Thoughts

Effectively managing Power BI user access ensures your data is secure, costs are controlled, and your team has the information it needs. Whether you use the simple point-and-click interface for a quick one-off check or automate the process with PowerShell for large-scale audits, incorporating regular permission reviews into your workflow is a must.

Dealing with layers of permissions and BI tool complexities is often what keeps marketing and sales teams from the data they need. We built Graphed to remove that friction completely. Instead of wrestling with workspaces and audit logs, our platform connects directly to your crucial data sources - like Google Analytics, Salesforce, and Shopify - and lets you instantly create dashboards and reports using natural language. It turns the entire reporting process from a manual, hours-long chore into a quick conversation, so you can get insights and get back to work.