Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Find everything you need to get certified on Fabric—skills challenges, live sessions, exam prep, role guidance, and more. Get started

Reply
mstefancik
Advocate II
Advocate II

Deployment and security

Hello,

 

I have got question about deployment process of .pbix file.

 

Scenario:

 

I have got 1 .pbix file with created complex model and all the reports: global report, 3 reports(Department1 report, Department2 report, Department3 report), personal report, customer report

 

Deployment scenario should be: all employees are divided into 4 groups with these security:

 a. managers - can see all the reports without restrictions, 2 managers can edit reports(responsible for poublishing reports), others can only view

 

 b. department1 - can see report Department1 (all data), personal report (every employee should see only his data), customer report (every employee should see only his customers data) - every user can only view reports and can not edit

 

 b. department2 - can see report Department2 (all data), personal report (every employee should see only his data), customer report (every employee should see only his customers data) - every user can only view reports and can not edit

 

 b. department3 - can see report Department3 (all data), personal report (every employee should see only his data), customer report (every employee should see only his customers data) - every user can only view reports and can not edit

 

What is best scenario to deploy such solution? What to leverage? groups, content packs, how to setup security, how many roles do I need?

 

Could anybody provide my steplist?Very appreciated.

 

Thank you

1 REPLY 1
v-yuezhe-msft
Employee
Employee

Hi @mstefancik,

To meet the above requirement, you can create a group in Power BI Service and configure Row-level security (RLS) on datasets in Power BI Desktop. With Group in Power BI Service, you can control that managers can modify the group’s content and other employees can only view the group’s content. For more details about creating group in Power BI, please review this article.

Besides, before you publish the report to Power BI Service, configure RLS on datasets to restrict data access for given users in Power BI Desktop. You would need to define different roles based on your scenario. For more details about RLS, please review this article.

Also please note that the RLS feature is available in the latest version of Power BI Desktop, you can download the desktop from this link. In addition, the RLS feature at this stage is still in preview mode, if you have any feedbacks about this feature, you can submit your idea on the Power BI Idea forum: https://ideas.powerbi.com/forums/265200-power-bi-ideas .

Thanks,
Lydia Zhang

Community Support Team _ Lydia Zhang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Helpful resources

Announcements
Europe Fabric Conference

Europe’s largest Microsoft Fabric Community Conference

Join the community in Stockholm for expert Microsoft Fabric learning including a very exciting keynote from Arun Ulag, Corporate Vice President, Azure Data.

Power BI Carousel June 2024

Power BI Monthly Update - June 2024

Check out the June 2024 Power BI update to learn about new features.

RTI Forums Carousel3

New forum boards available in Real-Time Intelligence.

Ask questions in Eventhouse and KQL, Eventstream, and Reflex.

Top Solution Authors