Forum Discussion
Using Custom Reports from a Content Pack after authorization is removed from the Pack
I am testing the impact of removing permissions to a Content Pack. Here is the scenario:
- User gets the Content Pack and makes a copy of the Report.
- User modifies the copied report while saving it.
- A snapshot copy of the Dataset is automatically created for the User and the copied Report uses the copied Dataset.
- Content Pack author removes the user's authorization for the Content Pack
- Result:
- User has no visibility to the Content Pack via Get Data
- User has no visibility to the Content Pack within their Workspace
- User still HAS visibility to the Copied Report and the Copied Dataset. The copied dataset continues to refresh with the original source's refresh schedule. So, the user loses no functionality for their custom report that was based upon a Content Pack although they no longer have access to the Content Pack.
The user's continued visibility to the copied contents was a result that was not expected by me. Is this continued visibility in fact the expected behavior from the Power BI Service?
4 Replies
- v-qiuyu-msftCommunity Support
Hi tcash,
Based on my test, if we publish the content pack to a specific group and the user1 is a member of this group, this user can get content pack to their workspace and create a copy. You can see that the copy of the dataset is shared, as there is a share button at the head of the dataset copy. Once we remove the user1 from that specific group, the user1 will not able to access the original content pack content and copy. Sometimes, there is a delay after we remove permission for the user, you can refresh the page to see if copy disappear.
Best Regards,
Qiuyun Yu- tcashHelper I
Hello Qiuyun,
I retested and my results differ from yours. Here are the steps and results that I tested this morning.
- User 1 Creates a new content pack with a report and a dashboard with just a test message in its content
- Give permission to a Group A
- Group A retrieves the Content Pack via Get Data and can see the report
- Group A makes a copy of the report
- User 1 removes Group A's permission
- Group A can still see the content pack report and the custom copy
- When Group A attempts to copy the content pack report the copy fails with the message:
The organizational content pack could not be copied.
Please try again later or contact support. If you contact support, please provide these details. - Group A can still make copies of the copied report and make new reports from the copied dataset
- User 1 removes the report from the content pack while leaving a dashboard with text content.
- Finally Group A can no longer see the content pack report nor the custom copy reports that were formed from the content pack.
Regarding the possible delays in timing of permissions...I tested the scenario through Step 6 and waited for an hour. Group A can still see and use the content pack report and the custom copy. I will look again tomorrow to see if those reports to which Group A no longer has access are still visible.
Regards Tim
- v-qiuyu-msftCommunity Support
Hi tcash,
I want to confirm something from you:
1. User 1 Creates a new content pack with a report and a dashboard with just a test message in its content.
Did that report and dashboard exist in a Power BI group or My Workspace?
2. Give permission to a Group A.
What's the "Group A"? It's a Power BI group member or another thing? Can you tell us how did you grant permission?
3. Group A retrieves the Content Pack via Get Data and can see the report
In which workspace to get data, My Workspace or Power BI group?
It would be better if you could share more detail steps for us to reproduce the issue.
Best Regards,
Qiuyun Yu