Restrict access to Dataflow

[markharing]

Hi,

I (the administrator) have granted a user access to 1 App. The associated workspace has 1 dataflow. The user is not granted a role in the workspace itself nor does it have acces to any other workspaces or App. Just 1 App. 

In Power BI desktop the user is now able to connect to Power BI Dataflows and can see, transform and load all Dataflows (!) within the tenant. Also the dataflows in other workspace. How is this possible? And how can I restrict the user to only use the dataflow that is associated to his App? 

[markharing · Accepted solution]

I found the underlying issue by reading an older post on this forum. The issue is in Power BI desktop itself. I logged into Dataflows as datasource before as an administrator on the same PC. This login was then stored on the local machine and could also be used when I sign in with another user account. Just clear the permission and all acces is denied. 

[v-alq-msft]

Hi, @markharing 

When publishinh apps, you can allow users to connect to the app's underlying datasets by giving them Build permission. They'll see these datasets when they're searching for shared datasets.

When you check the option to Allow users to connect to the app's underlying datasets, you're giving app users Build permission on those datasets. With this permission, they can do several key actions:

• Use the app datasets as the basis for their reports.
• Search for these datasets in Power BI Desktop and in the get-data experience in the Power BI service.
• Create reports and dashboards based on these datasets.

When you clear this option, new users you add to the app don't get Build permission. However, for existing app users, permissions on the underlying datasets don't change. You can remove Build permission manually from app users who should no longer have it.

For further information, please refer to the document .

Best Regards

Allan

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[markharing]

Hi Allen,

The issue is not the dataset but the Dataflow. The user has, via Power BI desktop, unlimited acces to all dataflows of all workspaces. Even the dataflows of workspaces and associated Apps where the user has no acces at all (not at workspace level and not a App level).