capabilities.work

Review and Adjust Workspace Access

A 4-step recipe with Power BI. We can help you get access.

Recipe · 4 steps

Review and Adjust Workspace Access

Run an access review pass over a workspace's membership.

  1. Read the workspace's current membership and access rights. This is the "before" record the review is evaluated against.
  2. Reduce the over-privileged principal to the reviewed access right. The call returns 200 with no body, so the change is verified by reading back.
  3. Remove the departed principal from the workspace entirely. Returns 200 with no body.
  4. Read the membership back so the downgrade and the revocation are both evidenced in the review record.
What you'll need to have ready
  • groupId: The identifier of the workspace under review.
  • downgradeUserId: The identifier of the principal whose access right is being reduced.
  • downgradeUserEmail: The email address of the principal being downgraded.
  • downgradeAccessRight: The access right to reduce the principal to. One of Admin, Member, Contributor, or Viewer.
  • downgradePrincipalType: The kind of principal being downgraded. One of User, Group, or App.
  • revokeUserId: The identifier of the principal whose access is being removed entirely.
For your developer

Arazzo workflow power-bi:workspace-access-review, 4 operations: getGroupUsers → updateGroupUser → deleteGroupUser → getGroupUsers. Specs on APIs.io.