Roles in workspaces in Power BI

Workspaces are places to collaborate with colleagues and create collections of dashboards, reports, semantic models, and paginated reports. This article describes the different roles in workspaces, and what people in each role can do. For more information, see workspaces in Power BI.

To create a new workspace, see Create a workspace.

Roles let you manage who can do what in a workspace, so teams can collaborate. Workspaces allow you to assign roles to individuals, and also to user groups such as security groups, Microsoft 365 groups, and distribution lists.

To grant access to a workspace, assign one of the following workspace roles to a user group or individual: Admin, Member, Contributor, or Viewer. For more information, see Give users access to workspaces.

Everyone in a user group gets the role that you've assigned. If someone is in several user groups, they get the highest level of permission that's provided by the roles that they're assigned. If you nest user groups and assign a role to a group, all the contained users get that role's permissions. All these capabilities, except viewing and interacting, require a Power BI Pro or Premium Per User (PPU) license. For more information, see licensing.

Workspace roles

Capability	Admin	Member	Contributor	Viewer
Update and delete the workspace.
Add or remove any user in a workspace role.
Allow Contributors to update the app for the workspace.
Add members or others with lower permissions.
Publish, unpublish, and change permissions for an app.
Update an app.			If allowed 1
Share items in apps, including semantic models.2
Allow others to reshare items.2
Feature apps on colleagues' home. 7
Manage semantic model permissions.3
Feature dashboards and reports on colleagues' home.6
Publish, Create, edit, and delete content, such as reports, in the workspace.
Create a report in another workspace based on a semantic model in this workspace.3
Copy a report.3
Create goals that are based on a semantic model in the workspace.3
Schedule data refreshes via the on-premises gateway.4
Modify gateway connection settings.4
View and interact with an item.5
Read data that's stored in workspace dataflows.				10
Create subscriptions to reports 6
Subscribe others to reports 6
Analyze in Excel 9
Manage subscriptions created by others.
Can receive subscriptions created by others 6

¹ Contributors can update the app that's associated with the workspace, if the workspace Admin delegates this permission to them. However, they can't publish a new app or change who has permission to edit it.

² Contributors and Viewers can also share items in a workspace or an app, including semantic models, if the app creator selected Allow users to share the semantic models in this app. See the Create and manage multiple audiences section of "Publish an app in Power BI."

³ To copy a report to another workspace, and to create a report in another workspace based on a semantic model in the current workspace, you need Build permission for the semantic model. You also need at least the Contributor role on the source and destination workspaces. For semantic models in the original workspace, if you have at least the Contributor role, you automatically have Build permission through your workspace role. For details, see Copy reports from other workspaces.

⁴ Keep in mind that you also need permissions on the gateway. Those permissions are managed elsewhere, independent of workspace roles and permissions. For details, see Manage an on-premises gateway.

⁵ If the items are in a workspace in a Premium capacity, you can view and interact with items in the Power BI service even if you don't have a Power BI Pro license.

⁶ To subscribe yourself or others requires a paid (Power BI Pro or Premium Per User (PPU)() license. When you subscribe others, those recipients also need a paid subscription, unless the items are in a workspace in a Premium capacity. B2B guest users can't subscribe others, only themselves.

⁷ If your admin has enabled this feature, see Manage featured content.

⁸ If your admin has enabled this feature, see Users can try Microsoft Fabric paid features.

⁹ If you want your users with the Viewer role to Analyze in Excel or export underlying data from the datasets in the workspace, you need to also give them Build permission on the appropriate datasets.

¹⁰ Consuming data from a dataflow gen2 with the dataflow connector requieres Admin, Member or Contributor permissions. Viewer permissions is not sufficient and is not supported for consuming data from the dataflow gen2.

Note

• You can assign users to roles, either alone or in a group, even if they can't use the role. In other words, you can assign users who don't have Power BI Pro or PPU licenses to a role that requires a license. See Licenses for details.
• Use the Viewer role to enforce row-level security (RLS) for users who browse content in a workspace. You can also enforce RLS without giving access to the workspace, publish an app and distribute it to those users, or use sharing to distribute content.
• Members can add users to a workspace with lower permissions, but can't remove users from any workspace roles.
• Deleting a user from Microsoft Entra ID doesn't automatically remove their access to Power BI workspaces. This fact is by design to prevent accidental data loss. Even after they're deleted from Microsoft Entra ID, the user's workspace access remains until explicitly removed.

Licenses

If one of the workspaces is in a shared capacity, everyone you add to it needs a Power BI Pro or Premium Per User (PPU) license. These users can all collaborate on the dashboards and reports in the workspace. If you want to distribute content to others inside your organization, either assign Power BI Pro licenses to those users or place the workspace in a Power BI Premium capacity.

When the workspace is in a Power BI Premium capacity, users with the Viewer role can access the workspace even if they don't have a Power BI Pro or Premium Per User (PPU) license. However, if you assign these users a higher role like Admin, Member, or Contributor, they're prompted to start a Pro trial when they try to create an artifact in the workspace⁸. If you want users without Pro or Premium Per User (PPU) licenses to use the Viewer role, make sure they don't also have other workspace roles, either as individuals or as part of a user group.

Publishing reports to the workspace enforces existing licensing rules. If you try to publish from Power BI Desktop or other client tools without a Pro or Premium Per User (PPU) license, you see the error, "Only users with Power BI Pro licenses can publish to this workspace."

Note

Power BI US Government isn't available as a Free license. For licensing details, see Power BI for US government customers.

Guest users

Microsoft Entra B2B Guest users who have been assigned a workspace role or granted specific item permissions, will be able to perform the operations permitted by those roles or permissions.

Note

Guest users who have been assigned workspace roles or specific item permissions will continue to have those roles and/or permissions, even if the Allow Microsoft Entra guest users to edit and manage content in the organization tenant setting is disabled.

Considerations and limitations

A limitation to be aware of:

• A person with a Power BI Pro license can be a member of a maximum of 1,000 workspaces.

Related content

• Create workspaces in Power BI
• Give users access to workspaces
• Questions? Try asking the Power BI Community