Security issues - sharing reports with external users - potential breach concern

Question

Hi -&nbsp;&nbsp;A client has shared some power bi reports with external users.As a result, these users are now registed as guest users on the client's AD tenant.&nbsp;During the sign in process, once the external user has authenticated, they come to the&nbsp;https://account.activedirectory.windowsazure.com&nbsp;page for the client's AD tenant...&nbsp; this shows that they have no apps - but it does show the "Groups" logo.&nbsp;External guest users can click this and are able to see all of the groups in the organisation - but more critically when you click on a group you can see all of the group users and their IDs (email addresses).&nbsp; &nbsp;&nbsp;&nbsp;Anyone know which settings need to be shut down to prevent this?&nbsp; Obviously we don't want external guests to be able to see email addresses of other users.&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

v-frfei-msft · Answer

Hi&nbsp;willharris24&nbsp;,
&nbsp;
Based on my research, I cannot find a way to hide the email address in AAD. I recommend to recreate a post in AAD Consumer Forum.
&nbsp;

Forum Discussion

Related content

SELECT permissions or external policy action error. OneLake Security issue

Row Level Security - External User

Turn Off Potential Security Risk Prompt

Role Level Security

Governance & Security