ISSUE - Removing App permissions does not remove permissions to underlying data

[kenneth_thompso]

I have a concerning issue. I’ve been going through and culling the list of people who have access to my published PBI application. However, when I remove people from the app I get a pop-up that looks like this which seems to indicate that removing their permissions to the “app” does not remove their permissions to the underlying report (and data). When I go to each underlying report’s permissions, sure enough ALL the work I put into removing people’s access to the app was completely pointless because their access is retained to the report. The user STILL retains permissions to “Read, reshare, and build” to EACH of the reports that are a part of the app. This means that I need to remove permissions from the App, and then (one by one) go and remove permissions from each user for each of the 10 reports that I have in my app??? For clarification, these people (and groups) did not have permissions to the underlying data and reports prior to being given access to the application. So, the tool propagates permissions when you are granting them, but not when you are removing them. This really needs to be fixed. I will literally spend HOURS removing each individual 1-by-1 from each dataset that is attached to my publushed app. What SHOULD happen, is their removal from the app subsequently removed them from the dataset as well (unless of course they have designated workspace permissions) See more details and conversation here: https://community.powerbi.com/t5/Issues/ISSUE-Removing-App-permissions-does-not-remove-permissions-to/idc-p/1690830

[fbcideas_migusr]

To be clear this is not an idea for an improvement, it is a severe design flaw that needs to be fixed.

[FELIPD01]

How does this not have MORE votes!? I ran into the exact same problem and just cannot understand why there isn't any possibility to edit permissions in bulk. From wat I see in screenshots from 2018 this was available. Where did it go?

[kenneth_thompso]

This has gotten even worse now because we do not even have the checkboxes anymore in the "new workspace experience" Now, the problem is 10X worse trying to remove permissions.

[David_Coyle]

This is a big issue, please address

[Lindsay_Lee1]

This is a major issue for data security. We would like to encourage our enterprise users to use workspace apps to share read-only content because it's a great feature in a lot of other respects, but it's hard to make that recommendation when it's so difficult to remove permissions.

[gingemck]

This is a huge issue and just wrong if it has been done on purpose. I've been working with Power BI for 8+ years and only discovered this last week following my first foray with the Scanner API which showed me hundreds of people who shouldn't have access to underlying datasets but who still did. One of the earlier comments asked how this doesn't have more votes and I think that it is only because nobody see / knows about it. I have used ChatGPT to help me write a PowerShell script that will remove all users from a single dataset who have access which isn't via the Power BI App or Workspace access - please reach out if anyone would like it.

[Winniethewinner]

Agreed - removing user permissions to the underlying dataset one by one is crazy. This needs to be better designed, at least with checkbox allowing to select multiple users and remove.