Power BI Report Server - Role and permission
Hi, I am aware of the available MS doc : Role definitions - predefined roles - SQL Server Reporting Services (SSRS) | Microsoft Docs that I read carefully but I find it a bit confusing, mainly because the roles and their associated tasks are shared between SSRS and Power BI RS... a bunch of tasks are related to features that aren't even available in Power BI RS ! I am also aware I can customize any role, but I'd prefer to use predefined ones if they are sufficient. Could you please help me to understand better : 1) Let's say a given user has both a Browser and Publisher role on a Folder. Can he manage (delete for instance) EVERY reports and subfolders present in the folder, or only the ones he owns ( = he's the creator of) ? If the answer is yes, what is the difference with a Content Manager ? Only the possibility to manage role and permission for that folder ? 2) Same scenario, but the user has only the Publisher role. On this folder, does it mean the user won't be able to see any reports that he doesn't own ? What happened if he delete a subfolder that contains reports he doesn't own and thus doesn't see ? Any help would be appreciated, Thanks in advance
User Access Permission Replaced by Domain Controller User Permission Policy
Dear all and support team, I have a case where my PowerBI report server is accessed by unauthorized user. After checking the log files and do some testing, I found that the user have an ADMIN DOMAIN role on domain controller and further checking shows all user with same role (admin domain) have a permission to access all reports whereas I didn't assign the user on user permission/authentication configuration. Is it possible to apply only configuration from PowerBI report server rather than domain controller? or is there any specific configuration/setting that we need to review & adjust? Any support will greatly appreciated, thank you rachmatPowerBI OnPremise Report Server- Permission on Reports and folders
Hello, We have recently installed PowerBI report server. It is using a different SQL Server as its report server database. The PowerBI service is running with a domain service account with least privilege. We have removed all built in administrator and default groups from reports and folders and added AD security groups to control access. The issue we are facing is that a Wintel administrator with admin privilege to the windows report server is somehow having rights to add himself to any reports or tweak other permission even if the Wintel Admin is not a part of any of the security group. We are not allowed to remove Wintel Admins from the server as they wont be able to manage thr servers anymore or during incidents. I noticed that a similar topic was posted by someone in 2016 but there was no specific answer at that time. Not sure if we have one now. Could someone help me out here with this?