To run R scripts in Power BI Service, certain permissions and roles are required to ensure that the necessary access control and security policies are in place. Below are the key permissions needed:
1. Power BI Pro or Premium Per User (PPU) License:
-
To use R scripts in Power BI Service, users need a Power BI Pro license or a Premium Per User (PPU) license. This is because running scripts in Power BI Service is a feature available to users with these licenses.
-
Without the appropriate license, users will not be able to create, view, or interact with reports that contain R visuals.
2. Dataset Permissions:
-
Dataset Permissions: The user running R scripts must have appropriate permissions (e.g., Contributor, Member, or Admin) on the workspace containing the datasets used in the R scripts.
-
Viewer role: Users with only the Viewer role cannot run R scripts because they do not have permission to modify or interact with data in Power BI Service.
-
Dataset Access: To pass data to an R visual, the user needs access to the dataset. Ensure the dataset is shared with them or that they have access to it within the workspace. The R script will only operate on data that the user has access to.
3. Power BI Service Admin Permissions:
-
For administrators who are setting up or managing R scripts in Power BI Service, they will need Power BI Service Admin permissions or higher to configure R scripting capabilities and manage user roles.
-
Admins need to ensure that R scripting is enabled within the Power BI Service for their organization.
4. Execution Rights for R Scripts:
-
R Script Execution Permissions: Power BI Service requires that users running R scripts have execution rights in the Service. This is typically handled via workspace permissions, but the organization’s administrator must also ensure that execution rights for R are enabled at the organization level.
-
Allowing R Scripts: Administrators need to verify that R script execution is permitted within the Power BI Admin Portal. This setting can be configured to allow or block R scripts in the workspace.
5. Workspace Role for R Visuals:
-
To add, modify, or run R visuals in a Power BI report, a user needs to have the following roles in the workspace:
-
Contributor: Can publish and edit reports and datasets, which allows them to run R scripts in Power BI Service.
-
Member: Can manage content within the workspace, including R visuals.
-
Admin: Can configure settings and manage user access to R scripts in the workspace.
-
Users with the Viewer role cannot interact with or run R scripts in Power BI Service because they do not have permissions to modify content.
6. Power BI Admin Portal Settings:
-
In the Power BI Admin Portal, administrators need to enable the R scripting feature to allow users to execute R scripts. The admin can manage the settings to allow or disallow execution of scripts across workspaces or the entire organization.
-
Security Settings: Ensure that security policies are in place to prevent unauthorized execution of R scripts, especially if the R scripts can access or manipulate sensitive data.
