Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Get Fabric certified for FREE! Don't miss your chance! Learn more

Security - Ability to maintain source security for reports published on BI Sites

The general requirement is that visualizations (Power View, SSRS etc...) must not circumvent existing policies, or introduce yet another set of security policies on top of those already implemented at the source. * For example, a visualization of sales data needs to reflect the policy that account managers can only read sales data for their region. * For performance reasons, this is enforced at the source by injecting predicates into the query based on the end users identity. If identities for end users are not passed down the process chain into the data layer, it leaves us little option but to publish individual reports for every region, which results in an explosion of complexity and numbers of reports, or move the whole model to BISM and manage the policy in yet another place (namely the BISM model). Impact blocking migration to SPO/BI Sites. At least 412 Site Collections with more than 600 Power Views. Impacting Adoption or migration for majority of BPUs - e.g. Finance, LCA, HR, etc
Status: Under Review
Comments
larabraghetti1
New Member
Any news about this feature?
akruzel
Kudo Collector
Definitely needed. Users want to log in and see only what pertains to them.
mribeiral
New Member
Two issues: 1. The security option does not show in portuguese version. 2. We need to be able to upload and updated file from PBI Desktop without having to redo the RLS.
jdunmall
Advocate I
To clarify, we don't need a security trimmed view... just a filter that returns the current user's name or UPN.
Rajkumar
Advocate II
I wanted to apply Current user filter to the Power BI report , Is it possible ?
NaveenKirane
Frequent Visitor
This is very much needed feature to restrict the data based on logged in user. Is there any plan to implement this feature?
rkammerer
Regular Visitor
The previous solution only works for those who have "SQL Server Analysis Services" + Enterprise Gateway. I't would be great if we could send dashboards with some filters applied, but not allowing the end user to change those filters. A lot of companies need this feature before they can apply Power BI as a business tool. Is there a plan to implement this anytime soon???
sgarces
Regular Visitor
You can do that with SSAS Tabular model and row-security model. Follow this link to do that https://msdn.microsoft.com/en-us/library/hh479759%28v=sql.120%29.aspx
julie
Microsoft Employee
'@marcelo, I can not repro the first issue you reported. Can you please file a ticket at https://support.powerbi.com by clicking on "Contact support" for better assistance? And yes, we are actively working on #2.
stephen_hext
New Member
Great work on RLS, but will we be able to dynamically filter data based on logged on user. i.e. set up a role with a large group of user in and then use a DAX statement using Username () or something like to filter data. Although username in PBI desktop returns AD account in Power BI service its a GUID string and most posts say not to use this. Noticed this suggestion that username () returns and effective name, which if done would solve the issue. https://ideas.powerbi.com/forums/265200-power-bi-ideas/suggestions/10312119-power-bi-service-return-effective-user-name-for-us . This way we can provide personal BI data to large groups of staff without having to create lots of individual roles.