Erik on 14 Mar 2016 22:54:36
As an IT administrator I need a way to see all content (datasets, reports, dashboards) that has been created and shared across the entire online tenant. This is needed to be able to support content after employees leave the organization as well as to support our SOX auditing practices.
Administrator on 30 Jul 2020 16:57:05
moving to back log for the team
- Comments (24)
RE: Power BI Global Admin
Good information, thankssehackear.top
RE: Power BI Global Admin
ThanksHackear Instagram Hackear WhatsApp Hackear Facebook
RE: Power BI Global Admin
We created a Service Principal and an "Admin" group Azure AD for this purpose. We had workspaces in place before we really started to manage them, so we needed to do some cleanup. Using PowerShell, we looped through every workspace as the Service Principal, which added itself, added the admin group, then removed itself. We also removed everyone's ability to create a workspace at will, and limited it to that same group. We have a request process for new workspaces and we make sure that the admin account is on ALL new workspaces. (We do have the occasional exception where we have opted to not be in a workspace due to it's sensitivity. We'll only go into the workspace on an as needed basis, and we just add the group through the admin portal.)While this workaround might be of use to others, like it was for us, having a definite way to accomplish similar without resorting to a loop in PowerShell would be better.
RE: Power BI Global Admin
Part of what you are asking for could be covered by:
1. https://docs.microsoft.com/en-us/rest/api/power-bi/admin/groups_getgroupsasadmin - this will give you overview of all artifacts in your tenant.
2. Azure Purview - can scan your tenant and provide you lineage between various artifacts
3. If you are using modern workspaces, and you have Power BI Administrator role in Azure AD, then you can give yourself access to any modern workspace via the Admin portal > Workspaces.
RE: Power BI Global Admin
Bump - I need this too!
RE: Power BI Global Admin
Bump - this is an issue for me too.
RE: Power BI Global Admin
Even if we're not able to get a dashboard or view within O365 portal, please allow us to be able to extract data using Powershell in some capacity. Pulling access per report or dashboard would be miles better that what we have today.
I'd like to echo the concerns of others. I have no way of knowing what guest/incorrect users have access to what dashboards and reports. I'm ultimately relying on my users to have common sense. Especially now that we're doing dashboards around financial, legal, and even security related information this is an invaluable feature for audit purposes.
While we do save the audit log of who has accessed dashboards, that is simply not enough to see who has access at a particular point in time. And while you can go off of historical share requests, legal/security would have a field day that the access is calculated instead of being actual.
RE: Power BI Global Admin
Not just see/list but also manage - move, delete etc
RE: Power BI Global Admin
'Hi, what's the status of this improvement. It has been 2,5 year since this requets and from a Administration\Maintenance point of view this is a very important feature. Especially when you want to implement powerBI in a big environment.
We are implementing Power BI at the moment and as a administrator I have no global overview of the environment
- Who created what
- Who has acces to what
- Which workspaces, Dashboards, reports, datasets, workbooks, datasources are present
- What is the relation between the different objects
- ...
In report server you could get all this info from de RS database. In Power BI Service this is more a black box, a nightmare for a administrator ;-)
RE: Power BI Global Admin
Maybe it is good to change the title of the improvement to a more specific description ex. Admin - Reporting of all objects withing Power BI Service