Report security

[Anonymous]

Hi All,

We have a report containing sensitive data, by accident one of the recipient emailed it to another coworker. The coworker downloaded free version of power bi desktop and viewed the report. Is there a way we can protect the report even if emailed or shared accidentally?

Thanks

[jdbuchanan71]

When sharing a report you can turn off recipients ability to share a report.

Then just make sure to only share the report with the people that should have access.  That way, even if someone emails the link to a user with no access, the 2nd user will not be able to see the report because it has not been shared with them.

[Anonymous]

Thanks can we not indiviualize it, like USER A can share the report and USER C cannot , something like that. Also accidents can happen with auto prompt when you try to share using power bi service.

I want to Avoid the following scenarios.

1) I gives access to a super user to READ and SHARE , the user accidentally shares with John Smith , instead of Joe Smith. As a developer how can i restrict John Smith to NOT A RECIPIENT at all.

2) Secondly when the super user shares via email and forgets to  UNCHECK the box and the reciepient of that email shares with some one else ? I want to avoid that as well.

Thanks

[jdbuchanan71]

You can, yes.  If you click on Share Report then go to the access tab you can see what access users have and if you click on the ellipsis you can pick read or read and reshare.

[Anonymous]

Thanks Jdbuchanan,

I already looked into it, here is the scenario.

I create a report and share it with the higher management team (Manager) and they in turn share with the area managers. The issue is the Top level managers do not want to do the extra step of unchecking the relevant boxes, They hjust want to share and get one with it.

[jdbuchanan71]

@Anonymous 

Unfortunatly there is no way to set the default on the flag to off (I wish there were) so they will need to uncheck the option.  Because you are dealing with sensitive data it may be a better idea to not allow the managers to share the report either.  Instead they have to send the request to the BI team to share with the new user and the BI team is responsible for setting the flag when they share the report.

[Anonymous]

Thanks Jdbuchanan. Thats a bummer.