Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Next up in the FabCon + SQLCon recap series: The roadmap for Microsoft SQL and Maximizing Developer experiences in Fabric. All sessions are available on-demand after the live show. Register now

Reply
mstefancik
Advocate IV
Advocate IV

Deployment and security

Hello,

 

I have got question about deployment process of .pbix file.

 

Scenario:

 

I have got 1 .pbix file with created complex model and all the reports: global report, 3 reports(Department1 report, Department2 report, Department3 report), personal report, customer report

 

Deployment scenario should be: all employees are divided into 4 groups with these security:

 a. managers - can see all the reports without restrictions, 2 managers can edit reports(responsible for poublishing reports), others can only view

 

 b. department1 - can see report Department1 (all data), personal report (every employee should see only his data), customer report (every employee should see only his customers data) - every user can only view reports and can not edit

 

 b. department2 - can see report Department2 (all data), personal report (every employee should see only his data), customer report (every employee should see only his customers data) - every user can only view reports and can not edit

 

 b. department3 - can see report Department3 (all data), personal report (every employee should see only his data), customer report (every employee should see only his customers data) - every user can only view reports and can not edit

 

What is best scenario to deploy such solution? What to leverage? groups, content packs, how to setup security, how many roles do I need?

 

Could anybody provide my steplist?Very appreciated.

 

Thank you

1 REPLY 1
Anonymous
Not applicable

Hi @mstefancik,

To meet the above requirement, you can create a group in Power BI Service and configure Row-level security (RLS) on datasets in Power BI Desktop. With Group in Power BI Service, you can control that managers can modify the group’s content and other employees can only view the group’s content. For more details about creating group in Power BI, please review this article.

Besides, before you publish the report to Power BI Service, configure RLS on datasets to restrict data access for given users in Power BI Desktop. You would need to define different roles based on your scenario. For more details about RLS, please review this article.

Also please note that the RLS feature is available in the latest version of Power BI Desktop, you can download the desktop from this link. In addition, the RLS feature at this stage is still in preview mode, if you have any feedbacks about this feature, you can submit your idea on the Power BI Idea forum: https://ideas.powerbi.com/forums/265200-power-bi-ideas .

Thanks,
Lydia Zhang

Helpful resources

Announcements
New to Fabric survey Carousel

New to Fabric Survey

If you have recently started exploring Fabric, we'd love to hear how it's going. Your feedback can help with product improvements.

Power BI DataViz World Championships carousel

Power BI DataViz World Championships - June 2026

A new Power BI DataViz World Championship is coming this June! Don't miss out on submitting your entry.

Join our Fabric User Panel

Join our Fabric User Panel

Share feedback directly with Fabric product managers, participate in targeted research studies and influence the Fabric roadmap.

March Power BI Update Carousel

Power BI Community Update - March 2026

Check out the March 2026 Power BI update to learn about new features.