cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
jbocachica
Resolver II
Resolver II

Sharing dashboards security issue

When I'm sharing a dashboard, there is a big big, super big issue, if you are using SSAS Connector and you share your dashboard, you are also sharing your credentials, think about this.

 

The user1 is the designer of the dashboard, and he have access to all data, the user1 share his dashboard with the user2, however the user2 just have access to some information, that kind of permissions are defined using row security level, a feature available in SSAS, however as the user1 is the designer and he has access without restricctions, the user2 is now able to see the same information as the user1, all your security is down, your users have now the last word to define who have access to the information of the company.

 

Bad, bad, too bad...

 

A sadness consultant

John Bocachica
Senior BI Consultant
Information Workers
http://www.iwco.co
3 REPLIES 3
andre
Memorable Member
Memorable Member

I am guessing that at GA the correct EffectiveUserName will be passed so that the row level security will work as expected.

Well, the EffectiveUserName is not passed and the row level security is not working as expected, even if look into the report, the row level security is bypassed; It's working as an impersonation way...

John Bocachica
Senior BI Consultant
Information Workers
http://www.iwco.co

It is not passed in Preview, but it will be working when the product is GA next week.

 

So to clarify, for the next few days, PowerBI.com will pass the credentials of the user who has created the reports.  When the product goes GA, the credentials of the user who is vewing the reports and dashboards will be passed to the Analysis Services model, so row level security will work as excpected.

Helpful resources

Announcements
PBI Sept Update Carousel

Power BI September 2023 Update

Take a look at the September 2023 Power BI update to learn more.

Learn Live

Learn Live: Event Series

Join Microsoft Reactor and learn from developers.

Top Solution Authors
Top Kudoed Authors