Security - Ability to maintain source security for reports published on BI Sites

[RAMUK1]

The general requirement is that visualizations (Power View, SSRS etc...) must not circumvent existing policies, or introduce yet another set of security policies on top of those already implemented at the source. * For example, a visualization of sales data needs to reflect the policy that account managers can only read sales data for their region. * For performance reasons, this is enforced at the source by injecting predicates into the query based on the end users identity. If identities for end users are not passed down the process chain into the data layer, it leaves us little option but to publish individual reports for every region, which results in an explosion of complexity and numbers of reports, or move the whole model to BISM and manage the policy in yet another place (namely the BISM model). Impact blocking migration to SPO/BI Sites. At least 412 Site Collections with more than 600 Power Views. Impacting Adoption or migration for majority of BPUs - e.g. Finance, LCA, HR, etc

[AaronLS]

Reoccurring problem every time I look at any of the prebuilt PowerView, PowerBI, etc. frontends for SSAS. If you were doing front end application development yourself, then you can weave the user context into the query.

[mstefancik]

we are now facing this problem, how to provide customer personalized views of reports. no workaround found. Any guess of compleiting this features?

[nemecv]

to: JD ... I absolutely agree

[derrickb]

This will increase user adoption. Very few people will go through all the steps necessary to create personalized filtered reports/dashboards. We need the ability to distribute corporate reports without 2 pages of instructions on how to personalize them.

[MaartenZH]

to use it for the company we need the possibility of default settings of a filter, depending on the user login, in SSRS we can handle that, but not in power BI

[eric_jenouvrier]

Thank you !!!

[b-guruv]

We are working on a Azure Portal to host PowerBI reports for the healthcare domain. Using AAD credentials would be very helpful as most of the users are federated by their current id providers.

[BONDAIVA]

Would be great improvement for those who cannot build "SSAS with row-level secutiry + Enterprise gateway etc." that in fact very complex scenatio for many companies. Would be much easier if Power BI could manage this. For example, reserved table in data model with reserved Username field that can be "lookup" table for the rest model.

[kristen3]

I would like to ask the Power BI team if there is a current work around for this? Indeed - I would consider this an ´enterprise´grade feature ... so many things you could do in sales reporting for example: Store / Sales area performance, Sales commission etc.)

[bart_van_den_be]

Most certainly, passing the identity from power BI web to a backend is a necessity!