Forum Discussion
Power BI Embedded Row Level Security
Hi Andy,
Since the "App Owns Data" only use one Power BI account, we can't identify the end users (your application users) with Power BI accounts.
1. No, the users are your application users.
2. In one words, there is only one Power BI account in this scenario. The end users are identified by the tokens. So it won't work here that we assign roles in Power BI Service. Please refer to: #considerations-and-limitations.
>>>Assignment of users to roles within the Power BI service does not affect RLS when using an embed token.
3. Yes, if we assign roles to users in the Service, they must be Power BI users. But this won't be necessary in this scenario. Please refer to the item 2 above for reasons.
Best Regards,
Dale
Excellent. That answers my questions perfectly.
Much Appreciated
- Andy
In the Power BI embed solution I built I am using the Master User Approach. This master user has full access to all reports in the Power BI tenant. This means I only need one Power BI license.
Users to the application are setup in Azure, these can be internal or external users. If you already have a list of users from another system you can do a bulk upload of users into Azure so this isn't an issue.
When users login to my app they are authenticated against Azure, once they are verified you have all the information needed for Row Level Security (RLS) to
only show the user the data they are allowed to see.
I have posted some examples:
https://www.podiumbi.com/powerbi-reporting-software/