Sharing Sensitive Data via a Subscription

[Jon-Meakin]

Hi everyone,

Is there a way to restrict users from setting up subscriptions to unauthorised users?

It seems that regardless of other security initiatives (workspace access, RLS, Dataset permissions, audience membership within an app, etc), a user can setup a subscription to a report and send it to any colleague. Even attaching a full PDF/PowerPoint version.

The only thing restricted is linking to the live report. The recipient must already have access, of course, or they are prompted to request it. Otherwise, someone with access to a sensitive report can simply subscribe a colleague to send them a copy.

Apologies if this has been asked before. I'm surprised that various search connotations haven't yielded an answer, so I'm happy to be told I've asked a really stupid and obvious question! 😄

[Jon-Meakin · Accepted solution]

Thank goodness for that. It was a daft question. To anyone else looking for this, Viewers can only setup a subscription to themselves.