Apply report-level filter on Power BI Dataset - Best Practices for data security?

[abayless]

I have a Power BI dataset that contains data for all of my clients. The goal is to create separate reports for each client using the same Power BI dataset, with each report filtered to only show data for a specified client.

So say that the dataset has a table like below. If I wanted to limit all of the data in the report to Client Name = Client 5, whats the best way to accomplish this? I know I can add it as a locked report-level filter, I'm just concerned that this may not be the most secure method. It would be a big problem if any one client could somehow override this and see data belonging to other clients.

Client Name	Hours	Fees
Client 1	12	1,600
Client 2	193	13,000
Client 5	84	4,625

So using a Power BI Dataset, what is the best way to filter data for the entire report? Are there security issues or features I should be aware of to minimize the risk of the report consumer seeing non-filtered data?

[v-robertq-msft · Accepted solution]

Hi, @abayless 

To restrict the end-users to view the report data for security, we use the Row-level security (RLS) in Power BI, which is designed to restrict data access for given users.

You can go to the “Modeling”->” Manage roles” to create a new role to restrict it to only data for “Client 5”, and go to the Power BI service to add the users to the role. But you should keep in mind that the RLS can only work for the users who don’t have “Edit” access to your dataset.

For more information, you can refer to these documents:

https://docs.microsoft.com/en-us/power-bi/admin/service-admin-rls

https://qmetrix.com.au/restricted-data-access-and-row-level-security-rls-in-power-bi/

Best Regards,

Community Support Team _Robert Qin

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[amitchandak]

@abayless , the way to do this is embedded power bi with RLS

https://docs.microsoft.com/en-us/power-bi/developer/embedded/embedded-row-level-security