I only want the end users to access what's in the report, not the entire semantic model.
Today, when sharing a report, we also share read permission to the entire semantic model (except for any RLS or OLS restrictions).
This is unintuitive and risky, because many people are not aware that they actually share the semantic model when sharing a report.
Instead, I only want the end users to access what's in the report, not the entire semantic model.
2 Comments
frithjof_vCommunity Champion
When I say "Today, when sharing a report, we also share read permission to the entire semantic model..." I mean this is what automatically happens, and there is no way around it. This is not something we want. This is just how it works but I don't think it should work like that. It should be optional.- frithjof_vOne example of what I want to get rid of, is the "show data point as a table" mechanism that displays granular data that the report creator didn't intend to display: https://blog.crossjoin.co.uk/2021/11/07/is-power-bis-show-data-point-as-a-table-feature-a-security-hole/
