Power BI embedded - data security based on user role

[sid1582]

Team - 

We have a HRMS system and we want to use PowerBI embedded for showing BI outputs. As a result , this involves limiting the data to a user and showing the user his own data and managers the data of their reportees. 

An access matrix system is already implemented in the HRMS. We want to implement a similar access stack with the Power BI. Is there a way to do it ? Please advise.

Roles -

Analyst group - sees their own data 

Manager group - see their reportees data 

Vertical leads - sees all data under a vertical 

All - See all data 

Kindly advise.

Regards,

Siddharth

[v-ljerr-msft · Accepted solution]

Hi @sid1582,

Row level security (RLS) can be used to restrict user access to data within dashboards, tiles, reports, and datasets. Multiple, different users can work with those same artifacts all while seeing different data. Embedding supports RLS. 

If you're embedding for non-Power BI users (app owns data), which is typically an ISV scenario, then this article is for you! You will need to configure the embed token to account for the user and role.

If you are embedding to Power BI users (user owns data), within your organization, RLS works the same as it does within the Power BI service directly. There is nothing more you need to do in your application. For more information see, Row-Level security (RLS) with Power BI.

Regards