Restricting What Data a user can see

[Amelia]

Hi Guys

I have report that connects to a data source and returns all records. This includes all products that all sotres sell. I was thinking if i just want each store to only see the product that it sold i would add a filter for that store to the report, but when i uploade this to the service the filter is editable by the store so they could change it so see others stores data which i dont want. Is the preferred method of doing this using RLS? so the store can only ever see data that was genertaed by that store? also if a filter of any kind  is included on a report is it always editable by the users?

thanks,

Guys

[TomMartens · Accepted solution]

Hey,

yes the preferred method to restrict access to data is using RLS.

If you import data then you can use RLS and define this also in Power BI Desktop.

If you use a live connection to SSAS Tabular or Multidimensional it's basically the same, but here roles are defined on the server and you also have to care that the logins of your users from the Power BI service are mapped to the users defined on your SSAS server if the service logins do not match with the domain logins.

Hopefully this answer is of some help

Regards

Tom