Scheduled Refresh security of an OData Source dataset

[Anonymous]

I have a Power BI Report deployed to the Power BI Service that contains an OData Source. The OData source is a data entity based in D365FO, this data entity contains data across multiple legal entities (companies)

I understand that OData will use AAD to authenticate the user and give the relevant data for that specific user. If a scheduled refresh is set up by a user in Power BI Service, that has access to multiple legal entities will all of the data be stored in the Power BI Service? If it does, and a different user with access to only one legal entity, views this dataset, will they only see the data specific to them, or will they be able to view all of the data available in that dataset? Is authentication checked again to determine their access?

[Seth_C_Bauer · Accepted solution]

@Anonymous Fundementally all end users will see the same data as the report author. The only way you can get an end users credentials to filter the data they see is by applying row level security to your model in Power BI. The assumption that OData will filter based on a users credentials is not accurate from my understanding.