App Permissions (strange Behavior)

[Khristian]

Hi everyone, i need a little help here,

An App has been created into a workspace with premium capacity, the audience has setted and permissions into app has been confugured.

But we noticed that some users that are not into the list audience are able to use the content of the app, how it could posibble, some tips?

[Khristian]

i unpublished the app, but the user stil hace access into analyze in excel, how could be possible

[Khristian]

No, i will delete the app and republished, i will share the result

[Elena_Kalina]

 If it does, focus particularly on dataset-level permissions and any security groups that might be granting indirect access.

[Elena_Kalina]

Hi @Khristian 

there are a few things worth checking:

1. Workspace access – Sometimes users get access through the workspace itself, even if they’re not in the app audience. Double-check the "Workspace access" list to make sure only the right people/groups are there.

2. Nested security groups – If you used security groups in your audience, there might be nested groups that include unintended users. A quick check in Azure AD could help spot this.

3. Admin bypass – Power BI admins (and sometimes other Microsoft 365 admins) can access content even if they’re not in the audience. Are these users in any admin roles?

4. Direct sharing – Someone might have shared a report or dashboard directly with them. You can check the "Shared with" tab on individual reports.

5. Published to web – If any content was accidentally set to "Public," that could explain it (though this seems less likely in your case).