Hi,
I have some practical questions related to the below information (see quotes below):
- Does a report reader have permission to read all the data in a semantic model unless it's restricted by RLS or OLS?
- Does a report reader have permission to read the DAX code in measures or calculated tables and columns?
- Does a report reader have permission to read the DAX code used in RLS role definitions?
- Does a report reader have permission to read the Power Query M code?
- Does a report reader have permission to read the data at different stages of the Power Query M code?
"When you share a report or dashboard, the people you share it with can view it and interact with it, but can't edit it. The recipients see the same data that you see in the reports and dashboards. They also get access to the entire underlying semantic model, unless row-level security (RLS) is applied to it."
https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-share-dashboards
"For example, when you share a report, you also share access to the semantic model below. You need to define security on the semantic model using Row Level Security (RLS) or Object Level Security (OLS) to prevent a report consumer from accessing all the data in the semantic model. By default, the read access of a report consumer isn't restricted to the elements and data they see in the report, but access restrictions can be enforced in the semantic model thanks to RLS and OLS. Use RLS to restrict access to rows of data being returned, and OLS to restrict the access to columns and tables. When you hide a table, column, measure, visual, or report page, on the other hand, that doesn't prevent a report user from accessing these hidden elements. Hiding therefore isn’t a security measure, but an option to provide a clutter-free user experience focused on specific tasks or goals."
Thanks in advance!
