Exam PL-300 All QuestionsBrowse all questions from this exam
Go to Exam
Question 255

HOTSPOT -

You need to grant access to the business unit analysts.

What should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

    Correct Answer:

    Box 1: App permissions -

    App permissions.

    This section describes the kinds of permissions you can grant to the specified users

    * Allow all users to connect to the app's underlying datasets using the Build permission

    This option grants build permission on the app's underlying datasets.

    * Etc.

    Note: Contoso identifies the following security requirements for analyst access:

    ✑ Analysts must be able to access all balance sheet and product catalog data.

    ✑ Analysts must be able to access only the profit and loss data of their respective business unit.

    ✑ Analysts must be able to create new reports from the dataset that contains the profit and loss data, but the reports built by the analysts must NOT be included in the quarterly reports for the board.

    ✑ Analysts must NOT be able to share the quarterly reports with anyone.

    ✑ Analysts must NOT be able to make new reports by using the balance sheet data.

    Incorrect:

    Not Member role: Would grant too much permissions.

    Not Viewer role: Need more granular permissions.

    Box 2: Reshare -

    App permissions,

    This section describes the kinds of permissions you can grant to the specified users

    * Allow users to share the app and the app's underlying datasets using the share permission

    This option grants users reshare permission on the app's underlying datasets.

    * Etc.

    Note: Analysts must be able to create new reports from the dataset that contains the profit and loss data, but the reports built by the analysts must NOT be included in the quarterly reports for the board.

    Reference:

    https://docs.microsoft.com/en-us/power-bi/collaborate-share/service-create-distribute-apps

Discussion
LucasCovey

I am part of an organization (with an organizational Workspace) and I just tested with another colleague - the only way to allow building via the underlying dataset was granting "Viewer" role in the Workspace, and then going into "Manage permissions" on the dataset in the Workspace and granting Build permission. I tried by adding the colleague JUST to the app (not Viewer role in Workspace) and it did not let them build from the dataset! Hope this helps someone else who was unable to test.

StressFree

LucasCovey: pro

Namenick10

- The Viewer roler to the workspace - Build

shakes103

The Viewer role only grants "read only" access to the dataset. Therefore it cannot be correct for this question.

Peguero

is correct "access permission to an app" for the first quesion?

YokoSumiGaeshi

That is why we grant the Build right in the second part of the question. Viewer role + Build right on the dataset is perfectly valid and is the answer to this question.

Jew0598

In Power BI, you can share a report with a user just for view only or give them access to view and build or to Edit. https://radacad.com/power-bi-user-access-levels-build-and-edit-are-different#:~:text=In%20Power%20BI%2C%20you%20can,and%20build%20or%20to%20Edit.

ThariCD

To be able to build new reports based on underlying dataset you need Build permission, not Reshare permission so the second option should be Build.

fdsdfgxcvbdsfhshfg

correct

charles879987

No build permission option in app audience access. only reshare dataset or reshare dataset with build permission.

Wadyba

One of the requirements is that Analysts must be able to access only the profit and loss data of their respective business unit. For this requirement to be achieved, you need to configure Row-level Security (RLS), and RLS only applies to the Viewer role. Thus: -Viewer -Build

JJMC5544

VIEWER to stay in RLS BUILD to let analysts create new report including with only RLS allowed content.

iccent2

Correct answers a re: Viewer Build

iccent2

I change my earlier submission: - Access permission to an app - Build If the analyst can build, then that means they are not viewers .

iccent2

But again, we are told by Microsoft that: "Contributors and Viewers can also share items in a workspace, if they have Reshare permissions" So, what can we make of that in relation to question 1? I would revert to Viewer. https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-roles-new-workspaces

iccent2

Again, Access permission to an app, is it one of the permissions in powerbi.com? We have Admin, Member, Contributor and Viewer. Or is it not so?

disndat7

"Access permission to an app" is correct, as this allows users to build contents with the datasets in the app (which is what the business analyst required to do). Refer to: https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-create-distribute-apps#create-and-manage-audiences

Retro01

The Viewer roler to the workspace and Build permission

BabaJee

the current answer is correct as the app allows build permission to the underlying dataset. https://intercom.help/cognition360/en/articles/4731210-powerbi-adding-app-permissions

Patrick666

Access permission to an app Build

c63b646

I believe it should be - Viewer (To keep the RLS applicable) - Build

rmeng

Given answer is correct.