Manage semantic model access permissions (preview)

The semantic model manage permissions page enables you to monitor and manage access to your semantic model. It has two tabs that help you control access to your semantic model:

• Direct access: Enables you to monitor, add, modify, or delete access permissions for specific people or groups (distribution groups or security groups).
• Shared report links: Shows you links that were generated for sharing reports. Such links sometimes also give access to your semantic model. On this tab you can review them and remove them if necessary.

This document explains how to use the semantic model manage permissions page.

Open the semantic model manage permissions page

To open the semantic model manage permissions page:

• From the OneLake data hub: Select Manage permissions on the More options (…) menu.

  

• From the semantic model details page: Select the Share icon on the action bar at the top of the page and choose Manage permissions.

  

• From the Share semantic model dialog: In the dialog header, select Manage permissions on the More options (…) menu. This opens the Manage permissions side pane. In the side pane, choose Advanced at the bottom of the pane.

  

These actions will open the semantic models manage permissions page. The manage permissions page has two tabs to help you manage semantic model access.

Manage direct access

The direct access tab lists users who have been granted access. For each user, you can see their email address and the permissions they have.

• To modify a user’s permissions, select More options (…) and choose one of the available options.

  

• To grant semantic model access to another user, click + Add user. The Share semantic model dialog will open.

  

Managing permissions granted through an app

Permissions on the semantic model that have been granted through an app are indicated by the word "App" followed by the permissions enclosed in parentheses, as shown in the image below.

You can't modify permissions granted through an app directly from the Direct access tab - you must first remove them from the app configuration. To remove such permissions:

1. Edit the app and unselect the relevant permissions on the Permissions tab of the app's configuration settings.

2. Republish the app.

3. Go to the Direct access tab of the semantic model's manage semantic model permissions page as described above. The user will still have the permissions that were granted via the app before update, but now they won't be tied to the app (note that the parentheses are gone). Now you can remove whatever permissions you desire.

   

Manage links generated for report sharing

The shared report links tab lists links that have been created to shared reports that are based on your semantic model. Such links may also grant access to the report’s underlying semantic model, and so they are listed here. You can see what permissions the link carries and who created the link. You can also delete the link from the system if you so desire.

Related content

• Semantic model permissions
• Share access to a semantic model
• Use semantic models across workspaces
• Share a report via link
• Questions? Try asking the Power BI Community