Forum Discussion
Community ChampionDon't let the end user explore the underlying data
Hi,
I am wondering if it is possible to restrict a report so that the end user (report reader) won't have any way of exploring the underlying data?
I mean, so that only the visualizations which I choose are available to the end user, with only the columns/measures which I choose and only at the granularity (aggregation) which I choose.
In this case, every feature like "show as a table", "show data point as a table", etc. should not be available to the end user. Because that may allow the user to view other columns and other granularities than I chose.
I want to allow the end user interacting with the visualizations (using the slicers I added to the report, and cross-filtering), however I want to control which columns and what granularity is available to the end user. I only want to give the end user access to the report as I make it, and not to other columns or other levels of detail than how I design the report.
Is it possible, or do I need to remove the columns from the semantic model and pre-aggregate the data in the semantic model?
Do I need to assume that the end user can explore all the data in the semantic model, also the data which I am not showing in the visuals? (Assume I am not using RLS or OLS in this case)
Assume I am distributing the report in app and the end user only has viewer permission on the app.
Thank you 😀
I think this blog post answered my question, and it seems I should assume that any data in the semantic model could be discovered by the end user (unless restricted by RLS or OLS):
https://blog.crossjoin.co.uk/2021/11/07/is-power-bis-show-data-point-as-a-table-feature-a-security-hole/
3 Replies
- GilbertQ
Super User
Hi frithjof_v
You can do this by going into the report settings by clicking on the three dots and selecting settings
Then scroll down to the export data settings and use the setting which works best for your requirement (which based on your question would be "summarized data and data in current layout"
frithjof_vI think this blog post answered my question, and it seems I should assume that any data in the semantic model could be discovered by the end user (unless restricted by RLS or OLS):
https://blog.crossjoin.co.uk/2021/11/07/is-power-bis-show-data-point-as-a-table-feature-a-security-hole/- frithjof_v
It's also stated here:
"When you share a report or dashboard, the people you share it with can view it and interact with it, but can't edit it. The recipients see the same data that you see in the reports and dashboards. They also get access to the entire underlying semantic model, unless row-level security (RLS) is applied to it. The coworkers you share with can reshare with their coworkers if you allow them to."
https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-share-dashboards
