Question

Your organization uses a Power BI deployment pipeline with Development, Test, and Production stages, each mapped to a separate workspace. A group of report developers must be able to build content and promote items from Development to Test, but they must NOT be able to deploy to the Production stage or modify content in the Production workspace. Only two release managers should perform deployments into Production. What is the recommended way to enforce this?

Accepted Answer

Grant the developers pipeline access plus Member/Admin roles on the Development and Test workspaces only, and grant the two release managers workspace access on Production.

Answer

Assign the developers the Admin role on all three workspaces and rely on deployment pipeline access to control who deploys.

Answer

Add all developers as Contributors on the Production workspace and remove them from the deployment pipeline entirely.

Answer

Configure row-level security roles in the Production semantic model to block developers from deploying.