URL Filtering in PowerBI, securely.

[SeanAnderson]

I am trying to embed a PowerBI report into a secure portal, using URL filters following the notes at the following website

https://docs.microsoft.com/en-us/power-bi/collaborate-share/service-embed-secure#filter-report-conte...

but, if you look at the following URL ...

How can I ensure that the user doesn't view the HTML source, retrieve the URL and change the filter to Industry eq 'Finance', for example ... or worse, removing the filter altogether and seeing ALL data.

When I move to my REAL reports, the filters are likely to be a passing across the email address of a user from the client company, so that they see records applicable to that company ... and need to ensure that users of Company A don't have easy access to records of Company B.

RLS is not a realistic option for our scenario, as we have hundreds of reports and thousands of client users.

[lbendlin · Accepted solution]

URL filters are NOT a security measure. AT ALL. All they do is provide default filters that the user can then change.

If RLS is not an option for you then you need to provision separate apps per customer.  They can still feed off the same shared dataset so you can do data maintenance in one place.