Need consultant help on power bi integration in external app

[Sunkari]

Hi All,

I have to integrate our power bi reports into an external application with following capabilities:

1) Reports should show only user specific data(row level security). I have more than 100 users

2) Report background and some images should be changed on user login

Note: Our source system is not present in Azure and we have to see latest data for every hour. We are not interested in moving data to Microsoft Azure. And also we are not interested in creating separate report for each user.

We found two solution for this.

Rest API:

We can also implement row level security using Rest API, however user filter is visible to end user which enables end user to change filter and see other user data.

As parameter is embedded in the URL it becomes security risk a user using developer tool( press F12) can pass on request by new user token.

We are currently working on a POC, which will eliminate the user drop down by Java script.Any person with some java script knowledge can catch the response using fiddler tool, he can see the other user tokens.When number of users are more then the size of markup will be huge which leads to poor response time.

We feel it's correct solution to implement RLS using query string.

Power BI Embedded:

Power BI embedded enables row level security,however periodic refresh is not enabled now.We have to manually publish to service to get latest data.This not suits for us as our data not present in cloud.

If any body have solution for our problem. Please let me know. Can you reach me via phone also 9703541044

[Eric_Zhang]

@Sunkari

---

We found two solution for this.

Rest API:

We can also implement row level security using Rest API, however user filter is visible to end user which enables end user to change filter and see other user data.

As parameter is embedded in the URL it becomes security risk a user using developer tool( press F12) can pass on request by new user token.

We are currently working on a POC, which will eliminate the user drop down by Java script.Any person with some java script knowledge can catch the response using fiddler tool, he can see the other user tokens.When number of users are more then the size of markup will be huge which leads to poor response time.

We feel it's correct solution to implement RLS using query string.

Power BI Embedded:

Power BI embedded enables row level security,however periodic refresh is not enabled now.We have to manually publish to service to get latest data.This not suits for us as our data not present in cloud.

---

->We can also implement row level security using Rest API, however user filter is visible to end user which enables end user to change filter and see other user data.

It is more a filter in your case rather than RLS. Why not to use the official built-in Row-level security (RLS) with Power BI?

Regarding Power BI Embedded, so far there's no such gateway to connect to a on-premises data source, thus for real-time purpose, the only approach is connecting to azure database in directquery mode.

[Sunkari]

@Eric_ZhangThanks for reply.

We can use Row-level security (RLS) with Power BI, but our client has already invested lot of money AWS so doesn't want move their data to Azure.

Is there plan to provide support for on-promise databases with schedule refresh support?

[Eric_Zhang · Accepted solution]

@Sunkari

I have no any idea on the ETA, the only good news is that it is on the roadmap confirmed by the product team, check this idea Support other data sources Direct Query using Gateway on Embedded Power BI. you can just vote it up and keep one eye on the developer blog.

By the way, an interesting preview feature for your reference.

Building a Real-time IoT Dashboard with Power BI: A Step-by-Step Tutorial

[Sunkari]

@Eric_Zhang Thanks sir, it is a nice feature

[Sunkari]

@Eric_Zhang: Please help use if have any ideas for this

[Sunkari]

And also we feel

http://community.powerbi.com/t5/Service/Hiding-Report-Level-filters-in-the-Iframe/m-p/70233#M13381 is not secure way of RLS