Publish an App, whose dataset is in another Workspace: Do you need to explicitly grant read access?

[mmace1]

If you publish an App, whose underlyling dataset is in another workspace: 

Do you need to explicitly grant read permission on that Dataset, to the App's users?  Checking the box below, isn't enough? 

(Seems like checking the below box, isn't enough - but I'm confused why)

[mmace1]

Got it. 

• Yes, in my scenario, the users explicitely need to be given Read permission on the dataset
• Simply publishing the App, would give Read permission.  Checking that box I posted a screenshot of above- would additionally give Build permission.
• However, this all only applies, if the dataset is in the same workspace as the App.   
• In this scenario - where the dataset lives in a different workspace - publishing the App doesn't give Read permission, and checking that box, doesn't give Build permisson. 
• So, I need to either grant the individaul users read access to the dataset, or put them in a Security Group (Microsoft 365 Groups don't work), that has read access to the dataset. 

[collinq]

HI @mmace1 ,

That option allows them to USE and INTERACT with that datasource.  That is not something I normally recommend if you are using an APP.  There are times that might be useful but you do not have to give that permissions for them to use the app.

I would appreciate Kudos if my response was helpful. I would also appreciate it if you would Mark this As a Solution if it solved the problem. Thanks!