Forum Discussion
willatkinson
Helper II
2 years agoSharepoint online data security
Hi, I had a request from a user who tried to share their report with a colleague, but they were unable to view the data in the report. The source for the report was an excel file held in shar...
- 2 years ago
Don't forget that the connection user scope does not need to match the scope of the report user. In fact, this is one of the min causes for accidental oversharing (exactly the things that RLS is attempting to restrict).
To make matters even more interesting you can be given access to a file in a sharepoint but NOT to the actual sharepoint site. Now that is truly messed up 🙂
willatkinson
Helper II
2 years agoSo does this mean someone can view data in a report, even if they don't have access to the sharepoint site?
lbendlin
Super User
2 years agoYes, if the connection owner has access.
- willatkinson1 year ago
Helper II
Oh ok thanks thats good to know. How do you configure this in the report in the PBI service?
- willatkinson1 year ago
Helper II
 
 
Do these authentication methods affect this?
- lbendlin1 year ago
Super User
Not sure what you mean. Only OAuth2 is supported.