Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Find everything you need to get certified on Fabric—skills challenges, live sessions, exam prep, role guidance, and more. Get started

Reply
Megachuckmc
Frequent Visitor

Can I get Row level security with salesforce data

I'm sure someone has asked the question but...

 

Can I set up row level security with data that I pull in from salesforce, either objects or reports?

 

My scenario is that we have created a dashboard for sales guys to do their quarterly reviews and all of the data comes from Salesforce reports.  Obviously sales guys should only be able to see their own data, so we created a dataset/report/dashboard and then duplicated it 20+ times and set filters in the reports so that they can only see their data...  Problem is if I need to make one structural change to a data set or report, I have to make it 20+ times.

 

Helps and suggestions greatly appreciated

Mike

5 REPLIES 5
greggyb
Resident Rockstar
Resident Rockstar


@Megachuckmc wrote:
...
so we created a dataset/report/dashboard and then duplicated it 20+ times and set filters in the reports so that they can only see their data...

@Megachuckmc, report filters are very explicitly not a security feature. As @TealCanady has mentioned above, the only way to enforce RLS in Power BI is to utilize a live connection to SSAS.

 

Using report filters as a security feature is ill-advised.

 

 

TealCanady
Advocate II
Advocate II

Mike,

I think this is actually dependant on their sales force permissions and less on Power BI but I would need to dig in more to be sure. If they are restricted in Salesforce they would be restricted in the reports because they are using their own logins to Salesforce to access the data. This is simaler to using Active Directory groups in the SSAS tabular model to restrict access to data. 


Teal Canady

Teal,

 

Thanks for the response, I'd be interested to see/hear anything else you can find out on this. 

 

I'm not sure how their Salesforce login would restrict them from seeing data that has been pulled into Power BI since they are not connecting directly to Salesforce but just opening up a dashboard that is connected to a dataset that gets uploaded from Salesforce.  The dataset includes everyones data.  For instance I have a data set that has 2000 Opportunities in it, but unless I filter it for each user they would be able to see all 2000 Opportunities.  Seems like I would need to introduce something "in between" that would look at their Power BI user credentials and compare it to something in the data set to return only those rows. 

 

Thanks again!

Mike

Mike,

 

I made the assumption you were working with the service connector for Salesforce online; my apologies. Are you pulling the salesforce data into a power pivot model in power bi? I know in the tabular version you can use a method to implement dynamic security based on a login. I'm curious if an modified version of this could be used. 


 

 

Teal Canady

Mike,

 

Looks like I found your resoultion and sadly it's not possible with a file at this time. You would need to use the dynamic security from my previous reply in combination with SSAS Tabular.

http://community.powerbi.com/t5/Integrations-with-Files-and/Row-Level-security/m-p/11223#M1911

 

Let me know if you have any other questions.

 

Teal 

Helpful resources

Announcements
July 2024 Power BI Update

Power BI Monthly Update - July 2024

Check out the July 2024 Power BI update to learn about new features.

July Newsletter

Fabric Community Update - July 2024

Find out what's new and trending in the Fabric Community.

Top Solution Authors
Top Kudoed Authors