Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Power BI is managed by the use of Security groups in Azure Active Directory.  This article describes the implementation of security for user and account management.  

To view existing Azure AD groups in the central tenant click  here: https://portal.office.com/AdminPortal/Home#/homepage

https://azure.microsoft.com/en-us/services/active-directory/#:~:text=Azure%20AD%20is%20the%20built,application's%20capabilities%20and%20your%20preferences

...

  • Administrators:  Highest permission level.  Access to all data and content on Power BI Service.  Ability to manage tenant level configurations and settings.  
    • Roles and Permissions
      • Power BI Service Administrator
      • Audit Logs / Audit Logs View Only 
    • Power BI  Licenses:
      • Power BI Pro
      • MFA
  • Developers: High permission level.  Access to create and administer work spaces and apps, add and delete content, add security.  
    • Licenses:
      • Power BI Pro
      • MFA
  • Analysts:  Moderate Permission Level.  Access to Dev and Test work spaces to collaborate on content creation
    • Licenses:
      • Power BI Pro
      • MFA
  • Viewers:  Read only permission to Production Apps.    May have access to Test Apps for UAT.  
    • License
      • Free
      • MFA
  • Service Accounts:   Permission Level Varies, but generally high.  Used for administrative tasks such as reading audit activity and configuring data gateways.

...

Top Level Groups

AD Group

Power BI License

Description

ucsb_licensing_employee_nonstudent_default ucsb_licensing_employee_student_default

Free

Default Group, ALL PBI users are in one of these two groups.

NOTE:  This group is intended only for licensing usage


dataservices_powerbi_administrators

Pro

Power BI Admin.  AD Security group "Power BI Administrators"



dataservices_licensing_powerbipro

Pro

AD Group to initiate license assignment for Pro Licenses

NOTE:  This group is intended only for licensing usage


...