Forum Discussion
How to securely filter data for web user account?
Have an embedded power BI report with imported data. One of the fields is accountID. When a web user (not an internal user) logs in to the web site we get the mapped accountID for that user. No AD record exists for these public users. I need to filter all data in the embedded power BI report by that accountID and be sure the user cannot change it by hacking a URL or something basic to see all data.
Looking into row level security but it does not seem to work for this scenario. There is no way we will be able to keep up with the changes to the user list manually.
Any suggestions on how this can be done securely?
-Ken
4 Replies
Have an embedded power BI report with imported data. One of the fields is accountID. When a web user (not an internal user) logs in to the web site we get the mapped accountID for that user. No AD record exists for these public users. I need to filter all data in the embedded power BI report by that accountID and be sure the user cannot change it by hacking a URL or something basic to see all data.
Looking into row level security but it does not seem to work for this scenario. There is no way we will be able to keep up with the changes to the user list manually.
Any suggestions on how this can be done securely?-Ken
Hi Ken,
You still can apply RLS in your scenario. Please refer to developer/embedded-row-level-security.
Best Regards,
Dale
I have read that info.. It seems the only way to pass in a clientid to an embedded power BI in a azure web app is to use the username() identity value and replace it with the clientid. Do you have an example of how to override the identity username value?
-Ken
Hi kleach,
What's the "clientid"? Why do you want to override the identity username?
Best Regards,
Dale
