More Granular and Robust Access Control for Power BI Workspaces

 I would like to suggest an improvement in the access control for Power BI workspaces. Currently, the available access levels are: Admin, Member, Contributor, and Viewer. However, these levels do not meet all the access control needs in production environments.

Identified Issues:

Member Permissions: The Member level allows granting access but not removing it. In production environments, it ishould be possible to have more refined control over who can add or remove access.

Reload Data without Modifying Reports/Dashboards: In many scenarios, it is desirable for a user to be able to reload data without having the permission to modify reports or dashboards. Ideally, these modification operations should be performed only through CI/CD pipelines.

Access to Groups of Reports: There are situations where it is necessary to grant access to a specific group of reports without allowing access to other reports within the same workspace.

Improvement Suggestions:

Customizable Access Levels: Introduce the ability to create customizable access levels, where administrators can define specific permissions for each level.

Granular Permissions: Allow permissions to be configured more granularly, such as the ability to reload data without modifying reports or dashboards.

Groups of Reports: Implement the functionality to create groups of reports within a workspace and define specific access permissions for these groups.