Forum Discussion

PSA_Swayam's avatar
PSA_Swayam
New Member
7 years ago

How to implement Row Level Security in Power BI Embedded?

I am trying to implement row level security in Power BI Embedded downloaded code which has been downloaded from below URL. https://github.com/Microsoft/PowerBI-Developer-Samples/tree/master/User%2...
Need Help
TedPattison's avatar
TedPattison
Microsoft Employee
7 years ago

If you are using User-Owns-Data then there is much less work to do. When using App-Owns-Data you must programatically generate an embed code with the RLS roles inside. But with User-Owns-Data, all of RLS is configured external to your applation.

 

Here are the basic steps.

  1. Add RLS roles to your Power BI Desktop project
  2. Publish the Power BI Desktop project to an app workspace
  3. In the Power BI Service, configure the users and groups for each role.
  4. Use Power BI embedding using the Azure AD access token created for each user.

At this point, RLS should work and Power BI embedding should only display the data for each user based on the role(s) they are in. I think you should be able to accomplsh this without any changes to your current application.

mittalpatel130's avatar
mittalpatel130
Helper III
6 years ago

TedPattison  - What should be the solution for Apps Own Data Scenario? I'm also facing the similar problem with my embedded reports. Embedding works as expected but not the Row level security. Here is my scenario - 

 

1. Data Source - SQL Server On-premise

2. Dynamic RLS is configued in Power BI Desktop

3. Published Reports to Premium Capacity, upgraded Workspace

4. Embedded Solution - Apps Own Data using JavaScript (used GenerateToken method)

5. Added EffectiveIdentity as below in the JavaScript GenerateToken Call.

 

{
    "accessLevel": "View",
    "identities": [
        {
            "username": "EffectiveIdentity",
            "roles": [ "Role1", "Role2" ],
            "customData": "MyCustomData",
            "datasets": [ "fe0a1aeb-f6a4-4b27-a2d3-b5df3bb28bdc" ]
        }
    ]
}

 

 

What am I missing here? Thank you!