Forum Discussion

ctoscher's avatar
ctoscher
Helper I
5 years ago
Solved

How to structure multiple reports to scale with complex RLS?

We currently have about 20 reports planned for our first Power BI project. Managing these all in one pbix file is manageable, however, some of our other projects could see dozens of datasets and hun...
Data Protection
  • selimovd's avatar
    selimovd
    5 years ago

    Hey ctoscher ,

     

    yes, you can add them manually, one by one in every workspace and then map the role - one - by - one.

    And don't forget to manually remove them everywhere when they change department or go out of your company...

    To be honest, I would not go that way, that's not really manageable if you're more than 5 people in your company.

     

    Another approach is you can script that and use the Power BI REST API:

    Groups - Add Group User (Power BI Power BI REST APIs) | Microsoft Docs

     

    If you need any help please let me know.
    If I answered your question I would be happy if you could mark my post as a solution ✔️ and give it a thumbs up 👍
     
    Best regards
    Denis
     

     

    Best regards

    Denis

selimovd's avatar
selimovd
Most Valuable Professional
5 years ago

Hey ctoscher ,

 

dozens of data sets and hundreds of reports are common. Usually you split them by department or project, that you have a few workspaces with a few data sets and reports each. That is managable then.

 

You can create different roles for each data set.

The roles you would assign by AD groups to make it more manageable. A user can also have multiple roles as he might be responsible for multiple countries or something similar, then the access is adding up.

 

If you need any help please let me know.
If I answered your question I would be happy if you could mark my post as a solution ✔️ and give it a thumbs up 👍
 
Best regards
Denis
 
  • ctoscher's avatar
    ctoscher
    Helper I
    5 years ago

    Thank you selimovd.

     

    Is there any way to manage users without AD?

    We have AD, but as mentioned, it's legacy software, so we're quite limited in its capacity and must tie into SQL.

    • selimovd's avatar
      selimovd
      Most Valuable Professional
      5 years ago

      Hey ctoscher ,

       

      yes, you can add them manually, one by one in every workspace and then map the role - one - by - one.

      And don't forget to manually remove them everywhere when they change department or go out of your company...

      To be honest, I would not go that way, that's not really manageable if you're more than 5 people in your company.

       

      Another approach is you can script that and use the Power BI REST API:

      Groups - Add Group User (Power BI Power BI REST APIs) | Microsoft Docs

       

      If you need any help please let me know.
      If I answered your question I would be happy if you could mark my post as a solution ✔️ and give it a thumbs up 👍
       
      Best regards
      Denis
       

       

      Best regards

      Denis

      • selimovd's avatar
        selimovd
        Most Valuable Professional
        5 years ago

        Hey ctoscher ,

         

        did it work with the scripting via REST API or the AD groups?

        I'm curious if you could solve this issue 🙂

         

        If you need any help please let me know.
        If I answered your question I would be happy if you could mark my post as a solution ✔️ and give it a thumbs up 👍
         
        Best regards
        Denis