Events
Mar 31, 11 PM - Apr 2, 11 PM
The ultimate Microsoft Fabric, Power BI, SQL, and AI community-led event. March 31 to April 2, 2025.
Register todayThis browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
This article describes semantic model permissions in the Power BI service and how these permissions are acquired by users.
The following table describes the four levels of permission that control access to semantic models in the Power BI service. The table also describes the permissions that the semantic model owner has on the semantic model, and other actions that only the semantic model owner can perform.
Permission | Description |
---|---|
Read | Allows user to access reports and other solutions, such as composite models on Premium/PPU workspaces, that read data from the semantic model. Allows user to view semantic model settings. |
Build | Allows user to build new content from the semantic model and find content that uses the semantic model. Allows user to access reports that access composite models on Power BI Pro workspaces. Allows user to build composite models. Allows user to pull the data into Analyze in Excel. Allows querying using external APIs such as XMLA. Allows user to see hidden data fields. |
Reshare | Allows user to grant semantic model access. |
Write | Allows user to republish the semantic model. Allows user to backup and restore the semantic model. Allows user to make changes to the semantic model via XMLA. Allows user to edit semantic model settings, except data refresh, credentials, and automatic aggregations. |
Owner | The semantic model owner isn't a permission in itself, but rather a conceptual role that has all the permissions on a semantic model. The first semantic model owner is the person who created the semantic model, and afterwards the last person to configure the semantic model after taking it over in the semantic model settings. In addition to the permissions described in this table that can be granted explicitly, a semantic model owner can configure semantic model refresh, credentials, and automatic aggregations. |
Note
Build permission is primarily a discoverability feature. It enables users to easily discover semantic models and build Power BI reports and other consumable items based on the discovered models, such as Excel PivotTables and non-Microsoft data visualization tools, using the XMLA endpoint. Users who have Read permission without Build permission can consume and interact with existing reports that have been shared with them. Granting Read permission without Build permission should not be relied upon to secure sensitive data. Users with Read permission, even without Build permission, are able to access and interact with data in the semantic model.
A user's role in a workspace implicitly grants them permissions on the semantic models in the workspace, as described in the following table.
Admin | Member | Contributor | Viewer | |
---|---|---|---|---|
Read | ||||
Build | ||||
Reshare | ||||
Write |
Note
Permissions inherited via workspace role can only be changed or taken away from a user by changing or removing their role in the workspace. They can't be changed or removed explicitly using the manage permissions page.
A user with an Admin or Member role in the workspace can explicitly grant permissions to other users using the manage permissions page.
When users share reports or semantic models, links are created that provide permissions on the semantic model. Users authorized to use those links are able to access the semantic model. Users with Admin or Member roles in the workspace where a semantic model is located can manage these links on the manage permissions page.
Users can acquire permissions on a semantic model used in an app if the app owner allows this in the app permissions configuration.
Semantic model permissions can be set via REST APIs. For more information, see Semantic model permissions in the context of the Power BI REST APIs.
Row-level security (RLS) might affect the ability of users with read or build permission on a semantic model to read data from the semantic model.
Events
Mar 31, 11 PM - Apr 2, 11 PM
The ultimate Microsoft Fabric, Power BI, SQL, and AI community-led event. March 31 to April 2, 2025.
Register todayTraining
Learning path
Work with semantic models in Microsoft Fabric - Training
Designing reports for enterprise scale requires more than just connecting to data. Understanding semantic models and strategies for scalability and lifecycle management are key to a successful enterprise implementation. This learning path helps you prepare for the Fabric Analytics Engineer Certification.
Certification
Microsoft Certified: Power BI Data Analyst Associate - Certifications
Demonstrate methods and best practices that align with business and technical requirements for modeling, visualizing, and analyzing data with Microsoft Power BI.