Dataset security

[PhillieB69]

Hi,

Within our company we work with different Business Units. Therefore data should only be visible within that Business unit. 

We currently have created a report and published it from desktop to service. The report is based on a filtered dataset, only showing records of the relevant Business unit.

We want to be enable the users from the business unit to do their own self service reporting. To this end we included RLS in the report. The thing is that the dataset underlying the records can be accessed and unfiltered, thereby showing data of other business units. 

So the main question is; how can we share a filtered dataset + report and make sure it remains filtered? Thereby enabling users the full editability and flexibility for their own dataset?

Thanks in advance!

[v-yulgu-msft]

Hi @PhillieB69,

From this document, if you share dataset and report to app workspace members who have edit permissions, the RLS roles will not be applied to them. That is to say users will be able to see all underlying data records.

Regards,

Yuliana Gu

[PhillieB69]

Hi Yuliana,

Thanks for the reply, clear. 

So any thought on a possible solution/ workaround? How can we distribute different dataset to different business units? Would it involve apps, content packages or import datasets iso query etc? Or is it simply not possible?

Kind regards,

Philip

[v-yulgu-msft]

Hi @PhillieB69,

Per my knowledge, I didn't find any valid solution or workaround to achieve RLS on dataset. As of now, it look like impossible to achieve such a requirement.

Regards,

Yuliana Gu

[Jawed]

I am not an expert so excuse if that makes absolutely no sense. Depending on the size of the data, you should be able to create a new column for each department/unit/function and ask it to only bring the data if the department/unit/function equals X otherwise, "blank".

If the data is huge, it may slow the system but at least that could be a possibility. 

[PhillieB69]

The column you are referring to is indeed available. The thing is that in the end the whole dataset is available whereas we'd like to share only the data that is relevant to the different departments/ companies. So how to build multiple filtered datasets from a single central dataset