Service & security
Workspaces, refresh, RLS. 8 cards. Click a card to flip, or use the arrow keys and space bar.
Four workspace roles?
Admin, Member, Contributor, Viewer — most to least privileged.
Which role edits content but cannot publish the app?
Contributor.
When is a gateway required?
When the Service must reach a source that is not publicly accessible, such as on-premises SQL Server.
Personal vs Standard gateway mode?
Personal supports scheduled refresh only, for one user. Standard supports refresh, DirectQuery and live connections, shared across the org.
Refresh limits: Pro vs Premium?
Pro allows 8 scheduled refreshes per day; Premium/Fabric capacity allows 48.
Which function for dynamic RLS?
USERPRINCIPALNAME() — it behaves consistently in Desktop and the Service.
Who bypasses RLS?
Workspace Admins and Members on datasets they can edit. Viewers get RLS applied.
What configures incremental refresh?
RangeStart and RangeEnd parameters defined in Power BI Desktop.