Deployment and security

[mstefancik]

Hello,

I have got question about deployment process of .pbix file.

Scenario:

I have got 1 .pbix file with created complex model and all the reports: global report, 3 reports(Department1 report, Department2 report, Department3 report), personal report, customer report

Deployment scenario should be: all employees are divided into 4 groups with these security:

 a. managers - can see all the reports without restrictions, 2 managers can edit reports(responsible for poublishing reports), others can only view

 b. department1 - can see report Department1 (all data), personal report (every employee should see only his data), customer report (every employee should see only his customers data) - every user can only view reports and can not edit

 b. department2 - can see report Department2 (all data), personal report (every employee should see only his data), customer report (every employee should see only his customers data) - every user can only view reports and can not edit

 b. department3 - can see report Department3 (all data), personal report (every employee should see only his data), customer report (every employee should see only his customers data) - every user can only view reports and can not edit

What is best scenario to deploy such solution? What to leverage? groups, content packs, how to setup security, how many roles do I need?

Could anybody provide my steplist?Very appreciated.

Thank you

[v-yuezhe-msft]

Hi @mstefancik,

To meet the above requirement, you can create a group in Power BI Service and configure Row-level security (RLS) on datasets in Power BI Desktop. With Group in Power BI Service, you can control that managers can modify the group’s content and other employees can only view the group’s content. For more details about creating group in Power BI, please review this article.

Besides, before you publish the report to Power BI Service, configure RLS on datasets to restrict data access for given users in Power BI Desktop. You would need to define different roles based on your scenario. For more details about RLS, please review this article.

Also please note that the RLS feature is available in the latest version of Power BI Desktop, you can download the desktop from this link. In addition, the RLS feature at this stage is still in preview mode, if you have any feedbacks about this feature, you can submit your idea on the Power BI Idea forum: https://ideas.powerbi.com/forums/265200-power-bi-ideas .

Thanks,
Lydia Zhang