Skip to main content
Microsoft Idea

Power BI

Needs Votes

ISSUE - Removing App permissions does not remove permissions to underlying data

Vote (29) Share
KENNETH THOMPSON's profile image

KENNETH THOMPSON on 26 Feb 2021 15:48:57

I have a concerning issue.

I’ve been going through and culling the list of people who have access to my published PBI application. However, when I remove people from the app I get a pop-up that looks like this which seems to indicate that removing their permissions to the “app” does not remove their permissions to the underlying report (and data).

When I go to each underlying report’s permissions, sure enough ALL the work I put into removing people’s access to the app was completely pointless because their access is retained to the report. The user STILL retains permissions to “Read, reshare, and build” to EACH of the reports that are a part of the app. This means that I need to remove permissions from the App, and then (one by one) go and remove permissions from each user for each of the 10 reports that I have in my app???

For clarification, these people (and groups) did not have permissions to the underlying data and reports prior to being given access to the application. So, the tool propagates permissions when you are granting them, but not when you are removing them.

This really needs to be fixed. I will literally spend HOURS removing each individual 1-by-1 from each dataset that is attached to my publushed app. What SHOULD happen, is their removal from the app subsequently removed them from the dataset as well (unless of course they have designated workspace permissions)

See more details and conversation here: https://community.powerbi.com/t5/Issues/ISSUE-Removing-App-permissions-does-not-remove-permissions-to/idc-p/1690830

Comments (5)
KENNETH THOMPSON's profile image Profile Picture

Lindsay Lee on 28 Feb 2024 20:17:03

RE: ISSUE - Removing App permissions does not remove permissions to underlying data

This is a major issue for data security. We would like to encourage our enterprise users to use workspace apps to share read-only content because it's a great feature in a lot of other respects, but it's hard to make that recommendation when it's so difficult to remove permissions.

KENNETH THOMPSON's profile image Profile Picture

David Coyle on 19 Apr 2022 23:35:57

RE: ISSUE - Removing App permissions does not remove permissions to underlying data

This is a big issue, please address

KENNETH THOMPSON's profile image Profile Picture

KENNETH THOMPSON on 06 Dec 2021 17:29:41

RE: ISSUE - Removing App permissions does not remove permissions to underlying data

This has gotten even worse now because we do not even have the checkboxes anymore in the "new workspace experience"

Now, the problem is 10X worse trying to remove permissions.

KENNETH THOMPSON's profile image Profile Picture

Dustin Felipa on 25 Oct 2021 03:07:48

RE: ISSUE - Removing App permissions does not remove permissions to underlying data

How does this not have MORE votes!?
I ran into the exact same problem and just cannot understand why there isn't any possibility to edit permissions in bulk. From wat I see in screenshots from 2018 this was available. Where did it go?

KENNETH THOMPSON's profile image Profile Picture

Lutz Bendlin on 26 Feb 2021 16:19:24

RE: ISSUE - Removing App permissions does not remove permissions to underlying data

To be clear this is not an idea for an improvement, it is a severe design flaw that needs to be fixed.