What's changed: Created PL-300 Chapter 5, completing the textbook (domain: Manage and secure). Managing workspaces and assets (workspaces/apps, distribution, dashboards, subscriptions/alerts, promote/certify, on-premises data gateway, scheduled refresh) and security and governance (workspace roles Admin/Member/Contributor/Viewer, Build permission, row-level security RLS (static/dynamic USERNAME()), RLS group assignment, sensitivity labels).
5.1Manage workspaces and assets
Understand workspaces and apps, publishing and distribution, dashboards, subscriptions/alerts, promotion/certification, gateways, and scheduled refresh.
Management is about delivering reports correctly and keeping them current. Master workspaces and distribution and refresh automation.
5.1.1Workspaces, apps, and distribution
A workspace is where authors co-develop content (reports/semantic models/dashboards). When ready, publish an app to distribute as a package to a broad audience. Choose distribution among apps (organized distribution to many viewers) / sharing (individual items to a few) / workspace roles (development members). Dashboards combine tiles from multiple reports and Q&A in the Power BI service.
5.1.2Refresh, gateways, endorsement
Import models stay current via scheduled refresh. To refresh on-premises (or VNet) data sources from cloud Power BI, you need an on-premises data gateway (cloud SaaS sources often do not). For trusted content, endorsement offers Promoted (set by authors) and Certified, with Certified the stronger guarantee. Only users or groups the admin designates in the tenant setting can certify (not necessarily admins themselves); that restriction is what makes the guarantee stronger. Set subscriptions/data alerts for periodic delivery or threshold notifications.
Cues: "organized distribution to many" = app. "individual items to a few" = sharing. "development members" = workspace roles. "refresh on-prem/VNet sources" = on-premises data gateway. "authors recommend" = Promoted; "admins quality-assure" = Certified. "periodic delivery/threshold alert" = subscriptions/data alerts.
Watch the mix-ups: (1) Apps (distribution) vs workspace roles (dev permissions). (2) Gateways are needed for on-prem/VNet refresh; cloud SaaS often does not. (3) Promoted (authors) vs Certified (admin-assured) differ in assurance. (4) Dashboards and reports are different.
5.1.3Section summary
- Distribution = app (many) / sharing (few) / workspace roles (dev)
- On-prem/VNet source refresh needs an on-premises data gateway
- Endorsement = Promoted (authors) / Certified (admin-assured); scheduled refresh keeps current
Sign in to track progress — Log in.
Quick check
(just a quick review)Q1. You want to distribute finished reports as an organized package to many viewers in the org. Best?
Q2. You want to scheduled-refresh an on-premises SQL Server from cloud Power BI. What is required?
Q3. You want to mark a semantic model as a trusted, admin-quality-assured model. Best endorsement?
Q4. You want to auto-deliver a report by email every morning at a set time. Best feature?
Q5. Which correctly distinguishes Promoted from Certified?
Keep track of your progress
The full study guide is free to read. Sign up free to practice with the question bank, track what you have read, review your mistakes, and highlight passages.

