Forum Discussion

rdaudt2021's avatar
rdaudt2021
Icon for Helper I rankHelper I
3 years ago

Integration Power BI online and SharePoint online

Hi.

 

Our organization has subscribed to Power BI Premium capacity. We have a few reports in the cloud already, everything works fine from all angles, including security and access control. We are basing access control on Azure AD groups and we are not using sharing of links.

 

Now we have started to explore integration between PBI online and SharePoint online. We were able to embed a report in a SharePoint page, it just takes a few clicks. We were surprised though to learn that people who have access to that particular Sharepoint page actually get to see also the report, even though they dont belong to any of the AD groups that we gave access to for that report. In other words: when we ask some users to go to the PBI portal page and try to see the report, they can't even see the workspace. That's the desired behaviour. However, when they access the SharePoint page they see and interact with the report.

It is like SharePoint security is overwritting PBI security. 

 

Is this the expected behaviour or are we missing something over here?

 

Thanks for any help with this.

 

Roque Daudt

 

(additional information: these users have Free PBI accounts)

4 Replies

  • Hi rdaudt2021 

     

    If those users have got the read access to the underlying dataset, then yes when you put the report into SharePoint they can read the data from the dataset, which allows them to then view the report.

    • rdaudt2021's avatar
      rdaudt2021
      Icon for Helper I rankHelper I

      Hi. Thanks for the reply. The users that I am talking about were not given access to the workspace neither objects in the workspace.

  • Anonymous's avatar
    Anonymous
    Not applicable

    Hi rdaudt2021 ,

    For the permission about emdedding a report in sharepoint online:

    1.  Firstly, if user want to view the embedded report in sharepoint online, should need can access the modern site page in sharepoint online, this could set in sharepoint online.

    2.  Secondly, user need have the permission to the report, there have two ways:

    • List the user as a member of the workspace within the Power BI service
    • embed a report within an Power BI Service App and share it directly with users

    For more details, you can read related document:Embed a report web part in SharePoint Online - Power BI | Microsoft Learn

     

    Best regards,
    Community Support Team_ Binbin Yu
    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

    • rdaudt2021's avatar
      rdaudt2021
      Icon for Helper I rankHelper I

      Hi. Thanks for the reply.

      From your note above, item "1", we are doing that. It is a modern site page. As per item "2", we ARE NOT doing that and this is the weird thing: every corporate user with a free Power BI license (and that have access to that SPO page) can see the report in the SPO page. They shouldn't. 

      In irder to confirm that things look ok in PBI, we ask the users to go to app.powerbi.com and tell us if they can see the report oir the workspace over ther. They can't. Still, they can see and interact with the report via SPO.