5.3. Reflection Checkpoint

Key Takeaways

• Design workspaces as collaboration spaces with the right license mode (Pro, PPU, Premium, Fabric), publish with Replace to preserve item identity, and use deployment pipelines for development, test, and production stages.
• Distribute to consumers with apps (audiences, Update app, optional Build and reshare), use dashboards for pinned, cross-report summaries and alerts, keep direct sharing for small ad hoc needs, and never use publish to web for internal data.
• Push information with subscriptions (report pages, dashboards, paginated reports) and data alerts (card, KPI, gauge dashboard tiles, or Activator); mark trusted content as promoted (any writer) or certified (admin-authorized reviewers).
• Use a standard on-premises data gateway for on-premises or private-network sources shared by multiple users and DirectQuery; personal mode is single-user Import only; cloud sources need no gateway. Schedule refresh up to 8 times a day in shared capacity and 48 in Premium/PPU/Fabric, with failure notifications and incremental refresh for large tables.
• Apply least privilege across layers: workspace roles (Admin, Member, Contributor, Viewer) for creators, item sharing and apps for consumers, Build permission for self-service authoring on shared models, RLS (roles defined in Desktop, membership assigned to groups in the service, Viewer-only enforcement, dynamic USERPRINCIPALNAME patterns), and sensitivity labels with inheritance and encryption for exported data.

Connecting Forward

Phase 6 turns knowledge into exam performance: how the PL-300 asks questions and how to manage time, quick-reference decision tables that compress Phases 2 through 5, and mixed-domain practice questions in exam style with full rationales.

Self-Check Questions

• A regional manager should view the sales app, see only their region, build their own reports on the certified sales model, and never edit the shared model. List every permission and configuration involved, and the one role you must not give them.
• A model refreshes from an on-premises SQL Server and a SharePoint Online list. Refresh succeeds in Desktop but fails in the service with a data source error for the SQL source only. Explain why, and describe the configuration needed.
• Compliance requires that any confidential data exported from Power BI be encrypted, that new reports built on confidential models be labeled automatically, and that executives receive the KPI page by email every Monday. Which features satisfy each requirement?