How to Manage Access in Power BI

Sharing your Power BI masterpiece is exciting until you hit a wall of permissions settings that look more complicated than your data model. Getting the right data to the right people - without accidentally showing everyone your entire sales pipeline - can be confusing. This guide breaks down exactly how to manage access in Power BI, from setting up collaborative workspaces to sharing individual reports securely.

Graphed

Still Building Reports Manually?

Watch how growth teams are getting answers in seconds — not days.

Watch the Demo

Understanding the Basics: Workspaces are Your Home Base

Before you can share anything, you need to understand where your content lives. In Power BI, everything revolves around workspaces. Think of a workspace as a shared folder or a project room where you and your team can create and collaborate on reports, dashboards, datasets, and dataflows together.

When you first start, you only have one workspace: My Workspace. This is your personal sandbox. It’s great for drafting reports and experimenting with visuals, but it’s not designed for collaboration. Anything you create here is for your eyes only, and sharing options are limited. To work with a team, you need to use a collaborative workspace.

Collaborative workspaces are the foundation of access management in Power BI. You create them for specific projects, teams, or departments (e.g., "Marketing Team," "Q3 Sales Reports," "Product Launch Analytics"). By adding team members to a workspace, you give them a central place to access and work on a collection of related content.

Graphed

Still Building Reports Manually?

Watch how growth teams are getting answers in seconds — not days.

Watch the Demo

The Core of Control: Assigning Workspace Roles

The most fundamental way to manage access in Power BI is by assigning roles to users within a workspace. Each role comes with a specific set of permissions, allowing you to control exactly what each person can do. There are four main roles to know.

The Four Workspace Roles Explained

• Admin: This is the captain of the ship. An Admin can do everything the other roles can do, plus manage workspace settings, update or delete the workspace, and add or remove other users (including other Admins). Only grant this role to team leads or people responsible for managing the project.
• Member: Members have broad access. They can add other users (but not Admins), publish and edit content, create apps, and share items. This role is perfect for teammates who are actively building and managing reports alongside you. A key difference from Admin is that they can't delete the workspace itself.
• Contributor: This role is for people who need to create and edit content but shouldn't have control over sharing or permissions. A Contributor can create, edit, copy, and delete reports and datasets within the workspace but cannot publish an app or share reports with others. This is a safe role for data analysts or creators who need to build reports without managing who sees them.
• Viewer: The Viewer role is purely for consumption. Users with this role can view and interact with reports and dashboards, but they cannot see the underlying datasets or make any changes. This is the perfect role for stakeholders, executives, or clients who just need to see the final product.

How to Add Users and Assign Roles

Assigning roles is straightforward once you have a workspace set up.

1. From your Power BI service, navigate to the workspace you want to manage.
2. In the top right corner of the workspace view, click the Access button.
3. A side panel will open. In the "Enter email address" field, type the name or email address of the person you want to add.
4. From the dropdown menu next to their name, select the role you want to assign (Admin, Member, Contributor, or Viewer).
5. Click Add and you're done! The person will receive an email notification and can access the workspace with their assigned permissions.

Sharing Specific Reports and Dashboards

Sometimes you don't want to give someone access to an entire workspace. You might just want to share a single report with a colleague or send a dashboard to an external client. Power BI gives you a couple of excellent ways to do this without cluttering up your workspaces.

Method 1: Direct Sharing for Quick Access

The quickest way to grant access to a single item is by using the "Share" button. This is ideal for one-off situations or informal sharing.

Here’s how to do it:

1. Open the report or dashboard you want to share.
2. Click the Share icon in the top utility bar.
3. In the "Send link" dialog box, you have a few options for who can see the report:
4. Below that, you can control what recipients can do with your report:
5. Click Copy link to get a shareable URL, or type in emails and click Send to email them a link directly.

When you share directly with a user this way, they get read-only access to that specific report - they cannot edit it. To view the report, they'll need a Power BI Pro or Premium Per User (PPU) license.

Graphed

Still Building Reports Manually?

Watch how growth teams are getting answers in seconds — not days.

Watch the Demo

Method 2: Publishing an App for a Broader Audience

When you need to distribute a collection of dashboards and reports to a larger group of people, creating a Power BI App is the best practice. An app bundles related content into a polished, professional package that’s easy for your audience to consume. It hides the messy backend of the workspace and presents your audience with only the finished reports they need to see.

Think of it this way: the workspace is the kitchen where you cook, and the app is the beautifully presented plate you serve to your guests.

To publish an app:

1. Go to your workspace and click the Create app button in the upper-right corner.
2. Setup: Give your app a name, description, and logo. This is what your audience will see.
3. Content: Here, you select which reports and dashboards from your workspace you want to include in the app. You can hide content you don’t want to share.
4. Audience: This is the key step. You control who can access the app. You can add specific users or entire user groups (like "Sales Team"). You can also create different audience groups to show a specific set of reports to certain people, all from within the same app. You also have the option to allow users to build on the underlying datasets, similar to the direct sharing option.
5. Once you're set, click Publish app. You'll get a link that you can send to your audience.

Apps are fantastic for simplifying the user experience and maintaining tight control over who sees which reports at scale.

Row-Level Security (RLS) for Granular Data Control

What if you want to use the same report for your entire sales team, but you want each sales rep to only see data related to their own accounts? This is where Row-Level Security (RLS) comes in. RLS is a powerful feature that filters data at the row level based on the user's role.

Instead of creating 10 different versions of the same report for 10 reps, you create one report and apply rules that say, "When Maria logs in, only show rows where the 'Sales Rep' column is 'Maria'."

Setting up RLS is a multi-step process that starts in Power BI Desktop:

1. Create roles in Power BI Desktop: In the Modeling tab, select Manage Roles. Here you will create a role (e.g., "Sales Rep").
2. Define role filters with DAX: For each role, you’ll write a simple DAX expression that acts as a filter on a table. For the "Sales Rep" role, the filter on the Sales table might look like this:
3. Publish the report to the Power BI Service: Save your work and publish the Power BI Desktop file to your chosen workspace.
4. Assign users to roles in the Power BI Service: In the Power BI service, find your dataset, click the three-dot menu, and go to Security. Here, you'll see the role you created ("Sales Rep"). Select it and start adding the email addresses of the users who should be in that role.

Once configured, Maria and John can look at the exact same report but will be shown completely different data based on the rules you defined. RLS is a game-changer for sharing sensitive data efficiently and securely.

Graphed

Still Building Reports Manually?

Watch how growth teams are getting answers in seconds — not days.

Watch the Demo

Final Thoughts

Mastering access in Power BI is about using the right tool for the job. Workspaces form the collaborative foundation, roles define what team members can do, direct sharing is for quick, one-off needs, and apps provide a polished viewing experience for a broad audience. For precise data filtering, Row-Level Security gives you ultimate control over who sees what.

While Power BI is incredibly powerful, managing users can get complicated, especially when your data is scattered across tools like Google Analytics, Shopify, and Salesforce. We built Graphed because we believe getting answers from your data shouldn't require a steep learning curve or hours spent configuring permissions. We streamline the process by letting you connect all your marketing and sales data in one place and create dashboards simply by describing what you want in plain English. You can then securely share real-time reports with anyone on your team, giving them the insights they need without the complexity.