Forum Discussion

Benc7777's avatar
Benc7777
Helper I
1 year ago
Solved

Sharing an app - Security

Morning all,

 

I hope some kind person can help.

 

So i have created a new report, and I want to share this with a customer.

 

So I have written the SQL statement to only fetch this customers data.

 

I have created the report and created an app, I was going to create a user within my org - [email protected]

 

So my question is how would i set this user to soley view the visual and nothing else, no editing, no viewing of data apart from the visual, no viewing of query and no editing query.

 

Has anyone else done something similar am i doing this the correct way ?

 

If anyone could help at all i would really appricaite it.

 

Thanks

B

  • Anonymous's avatar
    Anonymous
    1 year ago

    Hi, Benc7777 

    You can create a read-only role in your reporting tool. This role should only allow you to view the visualization and not any of the underlying data, queries, or editing capabilities. Assign this read-only role to the user [email protected]. This restricts their access to only what you want them to see. 

     

    Or implement row-level security to ensure that users can only see their specific data. This can be done by defining security filters in SQL queries or by setting them in the reporting tool.

    It is also possible to use the APP, without selecting the following options, users can only view your report and cannot modify it

     

    How to Get Your Question Answered Quickly

    Best Regards

    Yongkang Hua

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

6 Replies

  • Anonymous's avatar
    Anonymous
    Not applicable

    Hi, Benc7777 

    You can create a read-only role in your reporting tool. This role should only allow you to view the visualization and not any of the underlying data, queries, or editing capabilities. Assign this read-only role to the user [email protected]. This restricts their access to only what you want them to see. 

     

    Or implement row-level security to ensure that users can only see their specific data. This can be done by defining security filters in SQL queries or by setting them in the reporting tool.

    It is also possible to use the APP, without selecting the following options, users can only view your report and cannot modify it

     

    How to Get Your Question Answered Quickly

    Best Regards

    Yongkang Hua

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

    • Benc7777's avatar
      Benc7777
      Helper I

      Thanks this sounds like a plan ! Thanks for your time, I shall investigate and test.

  • Hi. If you want to share just one single visual, you could pin it to a dashboard and just share the dashboard removing the hyperlink of the tile that redirects to report. If you would like to let them at least use some filters, then create a report with the single visual and filters. If you want to share it via Power Bi App, add the report at the Apps and create an audience with just that report removing the settings that let them reshare or build.

    Those strategies should let the customer only see the dashboard or report with the visual.

    I hope that helps,

    • Benc7777's avatar
      Benc7777
      Helper I

      Thank you,

       

      Im just worried that a savvy customer could change the sql script in some way

  • You MUST implement the full Power BI Embedded (app owns data) scenario to have even a minimal chance at controlling this.

    • Benc7777's avatar
      Benc7777
      Helper I

      Thank you

       

      Oh, thats disappointing, so giving the customer a report within an app is not a good idea ?

       

      I think the embedded is huge amount of money isnt it ?