Forum Discussion
Sharing semantic models through intermediary
Hi DouweMeer ,
Thanks for the follow up.
Assigning an AD group with read access may not prevent a user with reshare and build from granting additional permissions. If they choose to share and allow build, that direct permission might still apply alongside the group’s read access, since permissions are handled in an additive way.If you want to ensure only read access is propagated, the reshare permission would need to be restricted.
Please reach out for further assistance.
Thank you.
So it is the guy who has the reshare ability who's manually choosing to share it with these individuals and "approve" their build ability?
I do think I've "solved" my problem in the meantime by assigning an AD group read access to whoever this reshare guy might share it with. Or would his reshare overrule that due to the added rights?
Hi DouweMeer ,
Thanks for the follow up.
Assigning an AD group with read access may not prevent a user with reshare and build from granting additional permissions. If they choose to share and allow build, that direct permission might still apply alongside the group’s read access, since permissions are handled in an additive way.
If you want to ensure only read access is propagated, the reshare permission would need to be restricted.
Please reach out for further assistance.
Thank you.