manage permissions - to report or dataset?

[AndrewPF]

I have a report to which I have granted access to an AD group. 

I did this by clicking on the ellipsis next to "Report" -> "Manage Permissions" -> "Direct access" -> "Add user".  

I always use "Report" rather than "Dataset". 

So now the AD group can view my report. 

However, if I remove the AD group from the same place, then go to "Datasets", the AD group is still there, and has to be removed separately. 

Should this happen? 

What is the difference between granting access to the report as opposed to the dataset? 

[ibarrau · Accepted solution]

Hi. It's correct. Think about the report as only UI, metadata or visuals configurations only. You can't just view a configuration of the bar chart, you need to see data. In order to view data, you need permission at the dataset. The dataset it's the model with the data imported. If you share report only, it's going to be empty, so you need the dataset. However, for example, if you only give permission to dataset, they can conect for building things but no reading the report.

In my personal opinion, it's not a good practice sharing individual reports. The best way of sharing is using a PowerBi App for the workspace and create audiences for scenarios.

I hope that make sense.