GetDatasetUsersAsAdmin - How long is data retained?

[Anonymous]

Hi All, 

I'm using the PowerBI Rest API (GetDatasetUsersAsAdmin) to extract the list of users/ groups which have access to datasets published to the powerBI service.

Using this information I then remove some users/ groups from the App audience, how long do I need to wait until the Rest API results are updated? 

Right now I'm deleteing groups/ users from audiences but I'm still seeing them as having access in the API query results. 

Many Thanks,

Adam

[Anonymous · Accepted solution]

With the help from MS Support, managed to conclude that removinig users from an App/ Audience doesn't remove their underlying datasets permissions. These have to remove sperately within the dataset settings, when this is done the no longer appear in the "GetDatasetUsersAsAdmin" response data. 

[lbendlin]

Ah, right, should have read the original premise more carefully.  This is why we always recommend to only share via the app, never via the workspace.

[Anonymous]

Yep much of the issue was from legacy use of workspaces for sharing, however, is worth noting that a user or groups datasets/ schematic model permissions won't automatically be removed if they are removed from an app. 

[lbendlin]

usually within 15 minutes, but it can take up to 24 hrs for the changes to sync through the Entra ID.

[Anonymous]

Thank you for your repsonse - what is strange is I'm still seeing users and groups which have been removed from the app audiences and row level security rules.  

[lbendlin]

I would call that a bug.  If you have a Pro license you can open a Pro ticket at https://admin.powerplatform.microsoft.com/newsupportticket/powerbi
Otherwise you can raise an issue at https://community.fabric.microsoft.com/t5/Issues/idb-p/Issues .

[Anonymous]

Thanks for your help - i'll try raising a ticket!