Row Level Security Exposed when sharing Power BI content embedded in PowerPoint over Teams

[robrien]

Hi,

We enabled the PowerPoint Add-in for Power BI in order to test it before general release to all our users. In testing however, we discovered that when you embed content that uses Row Level Security, and then send the PowerPoint presentation over Microsoft Teams, the preview of the PowerPoint File in Teams ignores the Row Level Security and exposes the data that should be restricted. Once the user opens the file then RLS is applied but the preview remains exposing the data. 

This is an issue with security and we could workaround this by communicating to our users or by suggesting to NOT use Row Level Security in PowerPoint embedded content. However this is not a practical solution to a security issue so just wanted to highlight our finding so that this can be looked into. 

Thank you.