Events
Mar 31, 11 PM - Apr 2, 11 PM
The ultimate Microsoft Fabric, Power BI, SQL, and AI community-led event. March 31 to April 2, 2025.
Register todayThis browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
When you create a report in Power BI Desktop, the data in that report is stored in a data model. When you publish a report to the Power BI service, the data model is also published to the service as a semantic model at the same time. When you share the report with others, you can give them Build permission for the semantic model that the report is built on, so they can discover and reuse it for their own reports, dashboards, etc. This article explains how you control access to the semantic model using Build permission.
Build permission applies to semantic models. When you give users Build permission, they can build new content on your semantic model, such as reports, dashboards, pinned tiles from Q&A, paginated reports, and Insights discovery. If a report outside the semantic model workspace uses your semantic model, you can't delete the semantic model. If you try to do so, you get an error message.
Users also need Build permission to do the following actions:
Users get Build permission for a semantic model in a few different ways:
Users that have at least a Contributor role in a workspace have Build permission on the semantic models in that workspace, as well as permission to copy reports in that workspace. For more information about roles in workspaces, see Roles in workspaces in Power BI.
Semantic model owners can assign Build permission to specific users or security groups on the Manage permissions page. For more information, see Manage semantic model access permissions.
A user with an Admin or Member role in the workspace where the semantic model resides can decide during app publishing that users with permission for the app also get Build permission for the underlying semantic models. For more information, see Create and manage multiple audiences.
If you have Reshare and Build permission on a semantic model, and you share a report or dashboard you built on that semantic model, you can specify that the recipients also get Build permission for the semantic model. For more information, see Share Power BI reports and dashboards with coworkers and others.
To remove Build permission for users of a shared semantic model, follow the instructions at Manage direct access.
If you remove Build permission, the people whose permission you revoked can still see the report, but can no longer edit the report or export underlying data. Users with only read permission can still export summarized data.
If you distribute an app from a workspace, removing people's access to the app doesn't automatically remove their build and reshare permissions. To remove their Build permissions, take the following steps:
In the workspace, in list view, select Update app.
Select the Audience tab, and then in the Manage Audience Access side pane, hover over the person or group whose access you want to delete and select the trash icon that appears. When you're done, select Update app.
You'll see a message that you need to go to Manage permissions to remove permissions for users with existing access.
Select Update.
Follow the instructions at Manage permissions to see how to remove permissions from users with existing access. When you take away a user's Build permission on a semantic model, they can still see reports built on the semantic model, but they can no longer edit the reports.
Certain actions, such as creating a report based on a semantic model or accessing the details page of a semantic model in the data hub, require Build permission on the semantic model. By default, when users who don't have Build permission try these actions, they get a dialog box that lets them send email to the semantic model owner requesting Build permission. The email includes the user's details, the name of the semantic model they’re requesting access to, and any other information they optionally provide.
If you have an Admin, Member, or Contributor role in the workspace where the semantic model resides, you can change the default access request behavior for a semantic model by going to the semantic model's settings and configuring the Request access options as desired.
The default option, not selected in the preceding image, is for Build permission requests to come to you via email. You're responsible for acting on the requests and notifying the requestors.
The second option is for you to provide instructions about how to get Build permission, rather than receiving requests via email. You might choose this option, for example, if your organization uses an automated system for handling access requests. When users who don't have Build permission try an action that requires Build permission, they see a message with the instructions you provide.
The Instructions text area in the preceding Request access example shows sample instructions. Instructions must be in plain text. HTML or any other type of code formatting render as plain text, rather than the code format. The following example shows the instructions users see when they try an action they need Build permission for.
Note
When you provide specific instructions, your email address is visible to users who request access.
Power BI provides Build permission as a complement to Read and Reshare permissions. All users who already have Read permission for semantic models via app permissions, sharing, or workspace access also get Build permission for those semantic models. Those users get Build permission automatically because Read permission already grants them the right to build new content on the semantic model by using Analyze in Excel or Export.
With the more granular Build permission, you can choose who can only view the content in an existing report or dashboard, and who can create content connected to the underlying semantic model.
Questions? Try asking the Power BI Community
Events
Mar 31, 11 PM - Apr 2, 11 PM
The ultimate Microsoft Fabric, Power BI, SQL, and AI community-led event. March 31 to April 2, 2025.
Register todayTraining
Learning path
Work with semantic models in Microsoft Fabric - Training
Designing reports for enterprise scale requires more than just connecting to data. Understanding semantic models and strategies for scalability and lifecycle management are key to a successful enterprise implementation. This learning path helps you prepare for the Fabric Analytics Engineer Certification.
Certification
Microsoft Certified: Power BI Data Analyst Associate - Certifications
Demonstrate methods and best practices that align with business and technical requirements for modeling, visualizing, and analyzing data with Microsoft Power BI.