Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
4 years ago

Applying user roles to the 'Get Data' option

The dynamics 365 database I use to build the powerbi report has a researcher role type. In the database it shows de-identified data i.e. the name of the person or the dob is not visible. 

 

 

Can I replicate the same view when loading those tables to the powerbi report? I know that we can create role level security to filter the rows/columns of the tables that are already in the report.

 

However, this doesn't prevent from users loading the table again with identifiable data.

 

Help please.....

4 Replies

  • "I know that we can create role level security to filter the rows/columns of the tables that are already in the report."

    That is not accurate. Row level Security cannot filter columns.  For that you may want to consider using OLS (Object Level Security),

  • Anonymous's avatar
    Anonymous
    Not applicable

    Thanks for that correction lbendlin . I just noticed that the issue was not with the roles but with the powerbi sign out and sign in. 

     

    The user account in the system has restrictions on the data they see based on the business unit assigned and through the active directory.

     

    Ex: If a user is assigned Brisbane business unit, they can see only Brisbane data. And Perth users only Perth data.


    As a system administrator I do testing with the earlier mentioned regional accounts and it requires me to log out and login to check each scenario. Though the account name on the top right corner gets updated with the account name I'm logging in. The restrictions doesn't apply.

     

    Hope this isn't too confusing.

    • lbendlin's avatar
      lbendlin
      Icon for Super User rankSuper User

      Is the connection Direct Query or Import Mode?

      • Anonymous's avatar
        Anonymous
        Not applicable

        Hi lbendlin 

         

        It's in import mode. But don't worry. I noticed that simply signing out and signing back in from the top right corner is not the ideal way. You should use the 'data source settings' and change the credentials. Thanks for your help