Disabling autocomplete of names in power bi online service

[Master_T]

Hello everyone

This might seem like a strange request from the title, so let me explain the scenario.

I've been following this helpful guide:

https://docs.microsoft.com/en-us/power-bi/developer/embedded/embed-multi-tenancy?tabs=workspace

to setup our tenant with multiple workspaces, so that each of our clients can access only their workspace (in other words: multi-tenancy implemented on a single tenant by using workspace separation and assigning each client its own workspace, as the article suggests)

Everything works as expected, but there is a little but annoying information leakage issue in this scenario.

There are various fields when navigating through a workspace where you can input a username/e-mail address. One example is when a user clicks "Update App" from the workspace main page and then clicks on the "Access" tab. As you can see from the following screenshot:

a user by simply typing all the letters of the alphabet can easily see all the email addresses and usernames present in the entire tenant thanks to the autocomplete feature. This becomes an information disclosure problem in the scenario described by the article, i.e.: when we have multiple clients connecting to our tenant. Each one can only access his own workspace, but through fields like that he can get a list of all users, even the ones from other workspaces.

So, my question is: is there some way to disable this auto-complete feature?

[collinq · Accepted solution]

Hi @Master_T ,

I don't think that you can do this in Power BI because I think these are just "built in" code and is jut "how it works" but perhaps Microsoft has a way???  Please create a support ticket with them and let us know the result.

[Master_T]

Thanks @collinq ,we'll try that.