Manage access for "Show data point as table" option based on abilities?

[lyjavier]

Hi,

I've developed a Embedded report in our web application with our self-defined ability for the users.

With embedded report, I saw that there is an option "Show data point as table" to access/see the underlying data.

Is there any approach to manage access for users in our app based on their abilities to be allowed to see the underlying data when clicking the option "Show data point as table" or not?

For ex:

User A has ability to view all the data (summarized as well as underlying data) is able to click on the option

User B has ability to only view the summarized and can not click on option "Show data point as table" to see the low-level data which is underlying data.

We have used the ability to manage their access in the web app, but the problem is they can take the embedToken and manage to build theirs own local web application, then they would be able to see all the underlying data despiting the role/abilities assigned because it's their own app not having any access management rules.

And i don't want to use RLS, CLS or OLS because the business rules for the chart has been too complex to deal with these solutions.

Thanks in advance!

[rajendraongole1]

Hi @lyjavier -You can programmatically control what options are visible in the embedded report by using the Power BI JavaScript API. Specifically, the API allows you to enable or disable specific interactions, including the ability to export or view underlying data.

Customize Interactions: By using powerbi.models from the JavaScript API, you can specify which interactions (e.g., showing underlying data) are allowed per user based on their roles or abilities defined in your web application.

https://learn.microsoft.com/en-us/javascript/api/overview/powerbi/configure-report-settings

https://learn.microsoft.com/en-us/power-bi/developer/embedded/embed-tokens

Hope the above suggestion helps.

[lyjavier]

But there will be a problem with this approach, because if the user can take the embed token and create their own web application to embed the report, they can see all the underlying data since we manage the ability to access it in our web app