Forum Discussion
one report different clients, each only seeing their data
I have one report layout that I would like to share with each of my clients. However, each client should not see the data of the others.
I thought I would create a database view for each client and source my BI report from these. Taking this route, I already will have to maintain a database view for each client and keep them aligned after any change. I don't want to create a copy of each report because that increases what I have to maintain.
Is there a report template feature where the 'schema' of the report is defined and then each derived report can have its unique datasource (with the same schema)? Or another solution?
Hi savaged
dynamic RLS will suitable for your scenario, you can create a role based on username to filter.
you need user table to mapping current user emails and related to other tables to enable filter effect
After finish setting dynamic role, you can publish your report and assign role to users by security setting(power bi services side) .
Row-level security (RLS) with Power BI
Power BI Desktop Dynamic security cheat sheet
Best regards
maggie
4 Replies
Hi savaged,
Have you looked into Row Level Security?
v-juanli-msftCommunity Support
Hi savaged
dynamic RLS will suitable for your scenario, you can create a role based on username to filter.
you need user table to mapping current user emails and related to other tables to enable filter effect
After finish setting dynamic role, you can publish your report and assign role to users by security setting(power bi services side) .
Row-level security (RLS) with Power BI
Power BI Desktop Dynamic security cheat sheet
Best regards
maggie
Thanks Maggie,
I'm guessing I will need to have an AD set-up?
- v-juanli-msft
Hi savaged
Does AD refer to AD group?
Based on my test, it is not necessary to have AD group for RLS in Power BI.
You could refer to this article which shows the whole proccess of implement RLS in power bi.
Additionaly, there is some benefit when you have AD groups.
By using an Active Directory Security Group this will mean you do not have to add users manually and it will be managed as people are added and removed from AD Security Groups.
Best Regards
Maggie
