topic Re: Disable public security group on SQL Server in Report Server

Disable public security group on SQL Server

gantta_del — Tue, 08 Nov 2022 15:29:30 GMT

Running on-premise Power BI in a highly regulated environment, security scans flagged the Public security group as a vulnerability and we are looking for work arounds to pass the audit. I'm having a hard time finding any information regarding the usage of the Public security group and the effects if we removed the group.

Short of just removing it and seeing how the system responds, does anyone have any suggestions or experience with disabling or removing the Public security group?

Re: Disable public security group on SQL Server

v-henryk-mstf — Wed, 09 Nov 2022 09:23:25 GMT

Hi gantta_del ,

Specifically for security groups what is the vulnerability, can you provide screenshots of that and explain it.

Also for security groups, it is the IT administrator who creates and maintains these groups. Specific information about security groups can be found in the following blog.

Power BI – Which Groups can be used to set Permissions in Power BI - FourMoo | Power BI | Data Analytics

Looking forward to your reply.

Best Regards,
Henry

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Re: Disable public security group on SQL Server

gantta_del — Wed, 09 Nov 2022 21:38:16 GMT

Thanks for the link, but I'm looking specifically at the SQL Server Database security groups. I wasn't present when the Power BI service was initially installed, but our team has inherited responsibility for managing the service.

As I understand it, the Power BI installation running on a VM comes out of the box with a SQL Server database security group named Public. The vulnerability test identified this group as invalid and should look to create permissions based on least-privileged requests for the security groups.