Deploy and Maintain Assets (20-25%)

Implementation

Roles are created in Power BI Desktop using DAX filters (Ex, [Email] = USERPRINCIPALNAME()). Users are assigned to roles in the Power BI Service.

Dynamic RLS

Uses functions like USERNAME() or USERPRINCIPALNAME() to filter data based on the logged-in user.     

Security Groups

Azure AD Security Groups are the preferred method for managing RLS at scale.

Viewer

Read-only access; can interact with visuals but cannot modify content or share data.

Contributor

Can create, edit, and delete content in a workspace; can refresh datasets.     

Member

Includes Contributor permissions plus the ability to share items, publish apps, and manage audience permissions.

Admin

Full control; can add/remove users and delete workspaces

Power BI Apps

The best way to distribute a unified package of reports/dashboards to a large audience. Supports "Audience Groups" to show/hide specific content

Certified vs. Promoted Datasets

Certification requires admin-level approval and indicates the data meets corporate quality standards. Certified datasets appear top in search results.

Standard mode

server-installed, multi-user, multi-source, supports both scheduled refresh and DirectQuery/Live Connection

Personal mode

single-user only, import/scheduled refresh only (no DirectQuery), not shareable

Gateway clusters

multiple gateways grouped for high availability/failover

Alerts

For Dashboard card/gauge tiles only

What supports personal gateway?

import/scheduled refresh only