Hello,
We have recently installed PowerBI report server. It is using a different SQL Server as its report server database. The PowerBI service is running with a domain service account with least privilege. We have removed all built in administrator and default groups from reports and folders and added AD security groups to control access.
The issue we are facing is that a Wintel administrator with admin privilege to the windows report server is somehow having rights to add himself to any reports or tweak other permission even if the Wintel Admin is not a part of any of the security group. We are not allowed to remove Wintel Admins from the server as they wont be able to manage thr servers anymore or during incidents. I noticed that a similar topic was posted by someone in 2016 but there was no specific answer at that time. Not sure if we have one now.
Could someone help me out here with this?
