A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
The usual approach is to publish all reports to a Power BI workspace and control access there, while using SharePoint as the central navigation page. Each report can then have its own permissions so only the intended department can open it.
First publish the reports from Power BI Desktop to a workspace in the Power BI Service. In the workspace, open each report and manage access. You can share the report with specific Entra ID users or security groups for each department. A better practice is to create Entra ID security groups and grant those groups access to the specific reports or apps rather than assigning individuals.
In Power BI you can either share reports individually or distribute them through a Power BI App. If you use an App, you can configure audience groups so that different departments see only the reports intended for them. This allows one central published app while still controlling which reports appear for each audience.
Once the reports are published, go to the report in the Power BI Service and copy the report link. On your SharePoint page create a list of report links or buttons that point to those URLs. Users will see the link but Power BI will still enforce permissions. If someone clicks a link without permission they will receive an access request message instead of opening the report.
If you want the reports embedded directly in SharePoint pages, use the Power BI web part and paste the report link. Permissions are still controlled by Power BI, not SharePoint, so only authorized users will be able to view the embedded report.
If your reports use a shared dataset, you can also apply Row Level Security in the dataset so different users see only the data relevant to them even if they open the same report. This is configured in the dataset roles in Power BI Desktop and then assigned to users or groups in the Power BI Service.
Effectively, a common architecture is a single SharePoint “Reports Hub” page containing links or embedded reports, a Power BI workspace containing all reports and datasets, Entra ID security groups mapped to departments, and optionally Row Level Security inside datasets. This gives you a central SharePoint entry point while Power BI handles the actual access control.
If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.
hth
Marcin