Users with assignment permissions - Premium Capacity

[Anonymous]

We have our tenant capacity setting set so that only specifc users are able to assign the premium capacity. Currently doing a clean up to remove premium capacity on app workspaces that do not require it. 

In doing so, we've found new app workspaces getting assigned premium capacity by a user that does not have assignment permissions. How could this have happened?!

[v-easonf-msft]

Hi， @Anonymous 

Is the porblem account  a capacity admins account and can you reproduce the  problem with other accounts？

If possible, check it again  whether it really has the permission  to assign premium capacity to other workspace.

Best Regards,
Community Support Team _ Eason

[Anonymous]

Confirmed that the user does not have capacity assingnment persmisions. Awaiting on a response from this user as to how he was able to. 

As you can see from the audit log screenshot in my previous posts, it clearly says that the activity is "Migrated workspace to a capacity"

[v-easonf-msft]

Hi , @Anonymous 

If the problem is still not resolved, it is suggest you  to create a support ticket to investigate the issue.

https://powerbi.microsoft.com/en-us/support/ 

Once you get any solution , please  kindly  add your reply as Answered to close this thread.Other community members will easily find the solution when they get the same issue.

Best Regards,
Community Support Team _ Eason

[GilbertQ]

Hi there

Could that happen when another user has assigned a user to an App with Premium capacity?

[Anonymous]

hi @GilbertQ , to clarify, a user that does not have Premium Capacity Assignment permissions was able to assign Premium Capacity to an app workspace. 

[GilbertQ]

Can a person who has got the Capacity Assignment permissions assign others to a Premium capacity?

[Anonymous]

@GilbertQ  - "Can a person who has got the Capacity Assignment permissions assign others to a Premium capacity? "

I'm not too sure what you mean by others. 

If a person has Capacity Assignment permissions, they can assign premium capacity to a Workspace.

[GilbertQ]

What happens if someone assigns a user to allow them to move it to Premium, then once done removes them from the list?

I am trying to figure out how it could be done?