How do you grant business unit analysts build access?

Secure and govern Power BI items Create reports

Answer Select Viewer as the workspace role and grant Build permission on the dataset for the business unit analysts.

HOTSPOT You need to grant access to the business unit analysts. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: [sampleXML/xmlfile-283_1.png]

Community Insight

The item tests workspace role plus dataset Build permission together, and the common trap is choosing Reshare or app membership instead of Build.

This PL-300 hotspot asks which workspace role and dataset permission to configure so business unit analysts can consume and build on Power BI content. The correct configuration is the Viewer workspace role combined with the Build permission on the underlying dataset.

Candidates pick Reshare (or an app membership) believing it lets analysts create reports over the dataset; Reshare only permits passing existing content onward and does not enable building new reports on the semantic model.

Community Discussion (25 comments)

e68b25f 👍 1

Permissions required in powerbi.com → Access permissions to an app Permissions for the profit and loss dataset → Build

Dusica 👍 1

AI writer yes you can create reports with Viewer and Build on dataset. But you can't save it in that workspace but have to save in WSP where you have permissions to save the report

539d541 👍 8

Given answer is only partially correct, the analysts must not be allowed to reshare. -Access to an app -Build

c63b646 👍 1

I believe it should be - Viewer (To keep the RLS applicable) - Build

JJMC5544 👍 7

VIEWER to stay in RLS BUILD to let analysts create new report including with only RLS allowed content.

rmeng 👍 1

Given answer is correct.

Retro01 👍 2

The Viewer roler to the workspace and Build permission

BabaJee 👍 2

the current answer is correct as the app allows build permission to the underlying dataset. https://intercom.help/cognition360/en/articles/4731210-powerbi-adding-app-permissions

Wadyba 👍 13

One of the requirements is that Analysts must be able to access only the profit and loss data of their respective business unit. For this requirement to be achieved, you need to configure Row-level Security (RLS), and RLS only applies to the Viewer role. Thus: -Viewer -Build

LucasCovey 👍 76

I am part of an organization (with an organizational Workspace) and I just tested with another colleague - the only way to allow building via the underlying dataset was granting "Viewer" role in the Workspace, and then going into "Manage permissions" on the dataset in the Workspace and granting Build permission. I tried by adding the colleague JUST to the app (not Viewer role in Workspace) and it did not let them build from the dataset! Hope this helps someone else who was unable to test.

StressFree 👍 7

LucasCovey: pro

iccent2 👍 2

Again, Access permission to an app, is it one of the permissions in powerbi.com? We have Admin, Member, Contributor and Viewer. Or is it not so?

iccent2 👍 1

But again, we are told by Microsoft that: "Contributors and Viewers can also share items in a workspace, if they have Reshare permissions" So, what can we make of that in relation to question 1? I would revert to Viewer. https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-roles-new-workspaces

iccent2 👍 3

Correct answers a re: Viewer Build

iccent2 👍 2

I change my earlier submission: - Access permission to an app - Build If the analyst can build, then that means they are not viewers .

Patrick666 👍 3

Access permission to an app Build

disndat7 👍 3

"Access permission to an app" is correct, as this allows users to build contents with the datasets in the app (which is what the business analyst required to do). Refer to: https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-create-distribute-apps#create-and-manage-audiences

Jew0598 👍 3

In Power BI, you can share a report with a user just for view only or give them access to view and build or to Edit. https://radacad.com/power-bi-user-access-levels-build-and-edit-are-different#:~:text=In%20Power%20BI%2C%20you%20can,and%20build%20or%20to%20Edit.

YokoSumiGaeshi 👍 12

That is why we grant the Build right in the second part of the question. Viewer role + Build right on the dataset is perfectly valid and is the answer to this question.

Peguero 👍 1

is correct "access permission to an app" for the first quesion?

Namenick10 👍 55

The Viewer roler to the workspace - Build

shakes103 👍 4

The Viewer role only grants "read only" access to the dataset. Therefore it cannot be correct for this question.

ThariCD 👍 19

To be able to build new reports based on underlying dataset you need Build permission, not Reshare permission so the second option should be Build.

charles879987 👍 2

No build permission option in app audience access. only reshare dataset or reshare dataset with build permission.

fdsdfgxcvbdsfhshfg 👍 5

correct

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Expert Analysis

Why the Answer Is Correct

Viewer is the least-privileged workspace role that still keeps analysts inside the workspace where Row-level Security on profit and loss data can be enforced for their business unit, and Viewer alone only permits read-only consumption. Adding the Build permission on the dataset in the workspace is what allows analysts to base new reports on the underlying model while still being limited by RLS. As LucasCovey verified in the organization, granting Viewer in the workspace and then granting Build under Manage permissions on the dataset was the only combination that worked. ThariCD likewise points out that building from an underlying dataset requires Build, not Reshare.

Why Other Candidate Answers Are Wrong

Reshare would let analysts forward already-published content but gives no ability to author new reports over the semantic model, so it fails the build requirement. Granting app membership or Contributor/Member roles exceeds the least-privilege need and can bypass the intended RLS-scoped, read-limited posture for business unit data. One commenter argued the analysts must be blocked from resharing and offered "Access to an app + Build," but app access does not confer dataset build rights by itself, and another noted that Viewer is read-only and therefore incorrect — yet read-only consumption plus Build is exactly the intended split. Selecting Build alone, with no workspace role, leaves analysts without a workspace foothold for RLS-enforced access.

Community Comment Notes

Namenick10 summarized the answer in two words, "The Viewer roler to the workspace - Build," matching Wadyba's reasoning that RLS applies only to the Viewer role. JJMC5544 framed it as "VIEWER to stay in RLS BUILD to let analysts create new report." shakes103 pushed back that Viewer "only grants 'read only' access to the dataset," but that objection overlooks the separate Build grant. StressFree simply endorsed LucasCovey's hands-on test as pro-level confirmation.

Official Reference

Exam Strategy

When a hotspot offers a role selector plus a permission selector, read for two separate needs: who can see the content (least-privilege role) and who can build on it (dataset permission). For PL-300, Viewer plus Build is the recurring least-privilege pattern whenever analysts must author reports over a governed model.

Frequently Asked Questions

Why is Build permission needed instead of Reshare for analysts on PL-300?

Reshare only lets users pass along existing reports or apps; Build is the permission that lets a user create new reports based on the underlying semantic model while RLS still applies.

Does adding analysts only to the Power BI app give them build rights?

No. App membership alone does not grant dataset build capability; you must give the Viewer workspace role and then grant Build permission on the dataset under Manage permissions.

More PL-300 FAQ →

Related Analysis

Practice All PL-300 Questions

Access 116 questions with complete answers and detailed explanations.

View Full PL-300 Practice Test →

← Back to PL-300 Study Guide