security roles not working

[Anonymous]

 I have not yet added any security to the PBI Report Server so only the default BULITIN\Administrators is available on the site level, folder level and report level. However, users who can connect to the Report Server URL can access all the PBI reports.  I was expecting user access to be restricted until the role-based security was assigned.  Why without any security can users access the reports on the server?

[Anonymous]

Yes, the users for my testing were also admins on the server. Thanks.  

[d_gosbell · Accepted solution]

---

@Anonymous wrote:

 I was expecting user access to be restricted until the role-based security was assigned. 

---

Yes, this should be the way the security works

---

Why without any security can users access the reports on the server?

---

Have you checked the admin role on the server to make sure that these users  are not in the admin role (or a group those users are part of are not in the admin role)