Dataflow hosting best practices when using Row Level Security?

[trutz]

Hi all,

I'm using dataflow to preload data and then put said data into a larger dataset that also provides row-level security.

Starting out, I put the dataset/report and the dataflow into the same workspace and handed out the viewer permission on the workspace.

I noted that users with the viewer role can still access the sensitive data in dataflow using Power BI Desktop. That leads the RLS concept ad absurdum.

So I think a best practice is to setup separate workspace for the dataflows and then put the data model in a second workspace.

Can someone confirm or did I overlook some security option for dataflows?

[Mariusz]

Hi @trutz 

You are correct, the best way is to keep the dataflows separate if you need let anyone access ( old days give access to the workspace ) or use certification capabilities for dataflows:
https://powerbi.microsoft.com/en-us/blog/announcing-new-certification-capabilities-for-dataflows/

Best Regards,
Mariusz

If this post helps, then please consider Accepting it as the solution.

Please feel free to connect with me.
LinkedIn

[trutz]

Thanks @Mariusz for your reply.

Could you elaborate on your remark: "old days give access to workspace"?

What would your recommendation be given the fact that I have a model that others should be able to use in their reports.

Would you create an app instead of giving viewer access to the workspace?