Forum Discussion
Security Strategy
Hello,
I am a new PBI developer and contemplating how to manage user permissions automatically at the report level.
What I would like to do is:
(1) Create a Dashboard page that shows user specific information based on Windows Account
(2) Use an Active Directory Group to if they have access to other links on the page
(3) Use an Active Directory Group to automically setup a users' page access
Are these approaches possible via PowerBI? If yes, is this the recommendated approach?
Any insight, links, and/or advice is sincerely appreciated.
I have never done specifically what you are trying to do although running a stored procedure is possible, and using RLS should allow you to block content that a user is not permitted to see. Not sure that can all be done to sql but it is possible to do that if not some through sql, some through power bi.
- https://www.red-gate.com/simple-talk/databases/sql-server/bi-sql-server/power-bi-introduction-working-with-parameters-in-power-bi-desktop-part-4/
- https://youtu.be/-GS3Kxvxm7A
- https://www.codeproject.com/Tips/5161141/How-to-Retrieve-Logged-in-USERNAME-in-POWER-BI-Rep
- https://radacad.com/dynamic-row-level-security-with-organizational-hierarchy-power-bi
- https://radacad.com/dynamic-row-level-security-in-power-bi-with-organizational-hierarchy-and-multiple-positions-in-many-to-many-relationship-part-1
- http://www.fourmoo.com/2016/10/03/power-bi-dynamic-row-level-security-things-you-need-to-know-to-get-it-working/
These links might help. 🙂
3 Replies
You can use Row Level Security
https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-rls
or object level security
https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-ols?tabs=table
it just depends on what you trying to show in your model - can you give more information around what you intend to do once you have the users login, what are you wanting to serve back?
Hi!
THank you for your quick reply!
I would like to:
(1) Create a Stored Procedure that will use the Windows Account name to determine what data to display the page.
(2) Automtically hide or display other links the user should have access to (Based on AD group)
Thanks again!
I have never done specifically what you are trying to do although running a stored procedure is possible, and using RLS should allow you to block content that a user is not permitted to see. Not sure that can all be done to sql but it is possible to do that if not some through sql, some through power bi.
- https://www.red-gate.com/simple-talk/databases/sql-server/bi-sql-server/power-bi-introduction-working-with-parameters-in-power-bi-desktop-part-4/
- https://youtu.be/-GS3Kxvxm7A
- https://www.codeproject.com/Tips/5161141/How-to-Retrieve-Logged-in-USERNAME-in-POWER-BI-Rep
- https://radacad.com/dynamic-row-level-security-with-organizational-hierarchy-power-bi
- https://radacad.com/dynamic-row-level-security-in-power-bi-with-organizational-hierarchy-and-multiple-positions-in-many-to-many-relationship-part-1
- http://www.fourmoo.com/2016/10/03/power-bi-dynamic-row-level-security-things-you-need-to-know-to-get-it-working/
These links might help. 🙂
