How to implement a sort of Column Level Security

Question

As far I've understtod Power BI only provides RLS while Column Level Secusity and object level is not available,

Suppose you have a table with units solds and unit price columns by item and you want to show price only to selected people.

Which is the best workaround/technic to implement roles on columns?

v-jiascu-msft · Answer

Hi&nbsp;acitsme,
&nbsp;
As you said before, Power BI RLS and the CLS (you defined) are two different things. No, we can't rely on Power BI for CLS. You can refer to my first post as an example. The RLS keeps all the columns, which isn't what you need.
&nbsp;
&nbsp;
Best Regards,Dale

v-jiascu-msft · Answer

Hi acitsme,
&nbsp;
That's the scenario of RLS. For example,
Item&nbsp; &nbsp; &nbsp; &nbsp; Units sold&nbsp; &nbsp; &nbsp; &nbsp; Unit price
A&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;100&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1.4
B&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;200&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;3.4
C&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;123&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;3.5
People 1 can see item A while People 2 can see item B and C.
If you don't want others to see the report, don't share with them or give any permissions to them.
&nbsp;
&nbsp;
Best Regards,Dale

acitsme · Answer

Dear&nbsp;v-jiascu-msft,I'm not interested in RLS but in CLS.&nbsp;In other words, I need person 1 to see JUST Item and Units Sold column while person 2 all columns.&nbsp;Is there any other solution than create to distict Power BI files and assign and publish them onto two 2 different O365 groups?&nbsp;ThanksAntonio

v-jiascu-msft · Answer

Hi&nbsp;Antonio,
&nbsp;
If the end users don't have "Edit" permission, you can add only two columns in a table visual. Then some group only see the two columns.&nbsp;
If they have "Edit" permission, you can hide some columns in the Desktop. But you have to create at least two files.&nbsp;

&nbsp;
Best Regards,Dale

acitsme · Answer

It means that for CLS we need to rely just on groups security and we cannot rely on Power BI RLS. Correct?

Forum Discussion

How to implement a sort of Column Level Security

5 Replies

Related content

Implementing Region-Level Security

One Lake Security implementation doubts

RLS,CLS Security Design and Implementation

Implement Dynamic RLS with Azure Security Group

MDM implementation