Disable "Test as Role" feature in published report

[ConnieMaldonado]

I'm working on a report with highly sensitive payroll data.  I'm using RLS to limit views based on organization hierarchy.  A manager can only see records for his/her direct reports.

Because there are multiple admins on the workspace, I'd like to set up a secure workspace and only provide access to specific individuals.

Is there a way to disable the "Test as Role" feature on the published report?

If an admin on the workspace downloads the pbix, there's really no way to limit what they can see within the pbix - is that true?

We're trying to lock down the access and prevent individuals from viewing the data.

[parry2k]

@ConnieMaldonado there is nothing specific to download but I think falls under this category, and only the viewer role cannot download the contents. I always prefer to share content using Power BI App instead of giving access to the workspace. Just my 2 cents.

✨ Follow us on LinkedIn and  to our YouTube channel

I would ❤ Kudos if my solution helped. 👉 If you can spend time posting the question, you can also make effort to give Kudos to whoever helped to solve your problem. It is a token of appreciation!

⚡ Visit us at https://perytus.com, your one-stop shop for Power BI-related projects/training/consultancy.

[parry2k]

@ConnieMaldonado yes he can be removed and others can be added as an admin, check workspace roles here Roles in workspaces in Power BI - Power BI | Microsoft Docs

✨ Follow us on LinkedIn and  to our YouTube channel

I would ❤ Kudos if my solution helped. 👉 If you can spend time posting the question, you can also make effort to give Kudos to whoever helped to solve your problem. It is a token of appreciation!

⚡ Visit us at https://perytus.com, your one-stop shop for Power BI-related projects/training/consultancy.

[parry2k · Accepted solution]

@ConnieMaldonado I don't think there is a way to disable this also if a user has permission to download the file they will see everything in the file, no way to protect/limit the access to the data.

✨ Follow us on LinkedIn and  to our YouTube channel

I would ❤ Kudos if my solution helped. 👉 If you can spend time posting the question, you can also make effort to give Kudos to whoever helped to solve your problem. It is a token of appreciation!

[ConnieMaldonado]

There is one person (who set up Power BI for the organization) who appears to be admin on everything.  Is it possible to remove him from the admin role and only provide access to the workspace to someone who has authority to view the data?  

[ConnieMaldonado]

One more question - I don't see Download the PBIX on the roles list, but I guess you would need access to the workspace to do that.  We also have export data turned off.  I can't test it as I'm an admin on the current workspace.  Who can download the PBIX?