Customer experience | Sales, Customer Insights,...

Users having full access to Dataverse (D365) via Power BI and Power Apps

(0) Share

Report

Posted on by ESR

I have noticed recently that D365 users with limited access to D365 frontend application are able to access all the entities of D365 via Dataverse using Power BI and Power Apps.

By connecting in Power BI and Power Apps to D365 entities, users can create reports, apps and export or read/edit all the data which they are not supposed based on their security role of D365.

Did anyone noticed this? Any idea how to fix this?

All responses (2)

Answers (0)

ESR 2 on at

Like (0)

Report

Users having full access to Dataverse (D365) via Power BI and Power Apps

Thank you for the response.
Suggested answer

RudyZhang Microsoft Employee on at

Like (0)

Report

Users having full access to Dataverse (D365) via Power BI and Power Apps

Hi,

We have analyzed and tested your issue and cannot reproduce your problem.

The security role we assigned to the test user does not have access to the /Account/ entity and the data for this entity cannot be loaded in PowerBI.

According to the official documentation, accessing data in PowerBI Desktop is achieved through Dataverse TDS, refer to the documentation in the link below.
https://learn.microsoft.com/en-us/power-apps/maker/data-platform/view-entity-data-power-bi

Therefore we believe that this may be due to improper permissions set by your security role. Please check the permissions you have assigned to this user's security role.

I hope my answer is helpful to you! If you have any other questions, please feel free to contact me.

Best Regards,
Rudy Zhang