Filtering Confidential Data

[ats1958]

Is there a secure way, without requiring individual Power BI Pro licenses, to use Power BI Embedded to filter to confidential data? Consider a school with confidential student grades. If I included a long, unique, alphanumeric string (GUID) with each datapoint in my database, could I use URL filtering safely? I'm confident that no one could guess someone else's GUID, however, I don't want them to be able to remove all filters and view every student's data, either.

An additional requirement is that each new user can't require any intervention on the developer's part. So assume that when a new teacher signs up, a GUID is generated for them, and then some records are added to the database with that GUID.

https://docs.microsoft.com/en-us/power-bi/service-url-filters

[otravers]

You can use row level security with PBI Embedded:

https://docs.microsoft.com/en-us/power-bi/developer/embedded-row-level-security

[ats1958]

So if I'm understanding correclty, I can just create a field in my database that contains usernames, and then pass that username to the embed configuration?

I ask because ultimately what I'd like to achieve is allowing users to sign up and upload their own data to my database. I could add their username when they upload it.

[otravers]

You need not just a username but also a role that you pass along to PBI:

https://docs.microsoft.com/en-us/power-bi/developer/embedded-row-level-security#applying-user-and-ro...