Power BI Security question

Sorry if this is a duplicate post - I am trying to reply but the post does not appear - slightly worried there is a delay and several duplicates will appear?

Hi Cherry,

thank you for your reply.

I have re-read the article you linked too, it was one I had looked at before posting, it is very useful.

I don't believe I will have problems with read only users, my concern is with report creators in the seperate divisions, these staff should not have access to other divisions data. However I can't see a way to bock report creators once the access is via the gateway.

While these users are internal I can control access to the data by creating divisional views and limiting access to these veiws by AD groups. However I am concerned that once in the cloud and accessing data via the gateway this control is lost?

Simplistically

In SQL Server

I can create views for each table and set read access via AD groups

e.g. vwTableA_D1

   SELECT * FROM TableA WHERE Division = 1

Report creators in Division 1 will be in the Divsion 1 AD group with read access to vwTableAD1.

My understanding is while the report creator is using Power BI desktop to develop everything is fine, but what happens if they create reports in the cloud or amend reports created in the Desktop tool from the cloud?  i.e. How do I stop a report creator in Divsion 1 accessing Division 2 views?

Thanks again and sorry if I am missing something.

Shaun