Power BI APP - multiple reports with different permissions

[jdusek92]

Hello,

I have a question about Power BI APPs.

I have 3 reports that show HR data:

• Report A - shared with 10 people via Link (Not via Workspace - they cannot have the Build permission/ see underlying data)
• Report B - shared with 20 (report A + 10 users) people via Link (Not via Workspace - they cannot have the Build permission/ see underlying data)
• Report C - shared with 10 (same as report A) people via Link (Not via Workspace - they cannot have the Build permission/ see underlying data). +Uses Row Level Security via UserPrincipalName

I want to create an App to that will join all 3 reports into one. But I still want the original permissions applied. So that users will see in the app exactly the same data as in individual reports.

I am not sure how to properly share the App with the users. I am afraid that sharing the app will overwrite the original report permissions + Row Level Security.

Users cannot have access to the data set, they can only see the aggregated data in the visualizations.

Can you please advise how to share the app to achieve this?

Warm regards,

Jakub

[Vikram_Siri]

Hi Jdusek92,

Now i got same requirement. Did u get solution on ur problem ? If yes pls.. reply

[jdusek92]

is the original Rowl Level Security applied, when I add that report to the App and Share the app? 

[lbendlin]

Row Level Security is a feature of the dataset, it has nothing to do with/ is not influenced by the report or the app. 

[jdusek92]

so when users already have access to those 3 reports via share link (they are not members of the workspace), I do not need to share the new app with them, when created?

[lbendlin · Accepted solution]

That would be nice, wouldn't it?  In reality you have two options

a) allow tenant wide auto installation of apps.  We would never ever do that in our org but your situation may be different.

b) your users need to "install/register"  the app before they can use report links. This is a one time thing, but it is a step that cannot be skipped.

[lbendlin]

At the moment it is still "one app per workspace". If you have sufficiently distinct audiences then you need to use separate apps for each of your audiences.  All of the reports in these apps can point to a common "golden" dataset if you want to keep the development effort in check.

Denying users build access is not user friendly.