#Provision a Premium Capacity Workspace

If your organization does not have a premium capacity, you will need to provision one in your Entra ID tenant. For a detailed explanation, please see the Microsoft documentation here.

1. Once you have your premium capacity provisioned, open your Workspace tile in Power BI.

2. Create a new workspace

3. Name the new workspace

4. Set the workspace to Private.

   If you set the workspace to public, then any users with a Pro license will be able to view the report loaded into this group regardless of any security roles that you have employed.

5. Set the workspace so that members can only view the Power BI content.

6. Enter the email addresses to add any other admins that will be managing the workspace. It should be noted as in step 4 that any users added to the workspace will be exempt from RLS roles.

7. Toggle to enable Dedicated capacity.

8. Select the dedicated capacity workspace of your choice

9. Click Save when done.

#Maintain Access

Part of maintaining a Power BI app requires that a user or team or application manage users. This is done by adding and removing users (or a distribution group) to both the role and permissions. If you are adding Group Admins for example, you must add them to the security role first and then add the user in the app permissions section.

You can use distribution groups to control both security groups and RLS role access. For details, refer to this Microsoft article.

#Set up Security Group

We recommend creating using an existing security group or creating a new one to manage access to your Power BI reports.

#Add a User

1. Scroll down the premium workspace to the datasets section.

2. Open the dataset options panel by clicking the ellipsis next to the dataset.

3. Select the Security option.

   ![A screenshot of a computer

AI-generated content may be incorrect.](/en/tygraph/installation/how-to-deploy-a-row-level-security-report/images/image61.png "A screenshot of a computer

AI-generated content may be incorrect.")

4. Select the security role. Typically, only one role is displayed here.

5. Enter the email address of the new user.

6. Click Add.

7. Click Save.

   

8. Navigate back to the workspace.

   

9. Click Update app.

   

10. Go to the permissions tab.

11. Add your users to the app.

12. A popular option is to ensure Install App Automatically is enabled. If it is greyed out then this option has been disabled by your Power BI administrator.

13. Click Update app when done.

    

#Remove a User

1. Go to your workspace.

   

2. Click Update App.

   

3. Navigate to the permissions header.

4. Remove users

5. Click Update app when done.

   

#End User Experience