Hi,
Why can users view a report with data from a sharepoint site that they don't have access to?
I am able to build a report with an excel file held in sharepoint online, and I can share it with a colleague that doesn't not have access to the site but can still view the data in the report.