Power BI - Does Sharing A Dashboard (Pinned Live Page) Expose The Underlying Data? Privacy Security

[Ohappyday]

I have pinned a live page from a Power BI report to a dashboard, then shared only the dashboard with a person in my organization.  That person was not able to see underlying data.  Still, the permissions in the service now added that person to the dashboard, report, and semantic model.

I think/hope that the data is shared only as aggegated counts for the dashboard, but I have to be certain before proceeding further.  I've read a good deal of documentation and am just not sure what the privacy status of the data is.

@privacy 

[aj1973 · Accepted solution]

Hi @Ohappyday 

Best practice is to separate the report and dashboard from its dataset into 2 different WS and publish the dashboard into an App. Add the user to the audience of the dashboard then go back to the dataset and set Permissions to the user as a view on it. 

[aj1973 · Accepted solution]

Hi @Ohappyday 

Best practice is to separate the report and dashboard from its dataset into 2 different WS and publish the dashboard into an App. Add the user to the audience of the dashboard then go back to the dataset and set Permissions to the user as a view on it. 

[Ohappyday]

Hi Amine,

Thank you for your response.  Can you tell me how to separate the report and dashboard from the dataset?  I am very inexperienced with Power BI, though I

hope for that to change in the near future

[aj1973]

@Ohappyday 

This video is a good example https://www.youtube.com/watch?v=v3FlNhpyrz0

There is also another way, little longer but easy... Let me know if you didn't like the video way 🙂

[Ohappyday]

The video seems useful, but requires a few external tools.  I'll have difficulty getting permissions internally to use them.  Could you share the alternative approach?

[aj1973 · Accepted solution]

For this you need 2 Workspaces A and B:

• Publish the report with its Dataset into A
• Open the report and download the report like this
• Open the report in your desktop, connect it to the dataset in WS A
• Publish the report into WS B
• Go back to WS A and delete the report but keep the dataset

You will have both of them seprated.

[Ohappyday]

Thanks very much Armine!  Actually easier than I anticipated.  Confirming - this process allows secure publishing of the dashboard with live pinned page, without exposing the underlying data, yes?

[aj1973]

Yes and No, 

To cover all security aspects, Workspaces should only be accessed by Members and/or collaborators. End users should be added to security AD Groups to consume the Reports/Dashboards in the production environment  which is the App and grant permission to that security Group as Viewer directly at the semantic model Level. 

You are welcome