Power BI Embedded Solution

Hey GeorgeKarl ,

you do not need the user's credentials.

What you need is the login tokin (basically the email address), e.g., [email protected]

or [email protected]

Then you have to decide if you want to create dynamic Row Level Security or static Row Level Security. Dynamic means there is only one group, static means each department has it's own group.

Dynamic RLS always adds a performance benchmark, this means the larger the model the more I recommend the static approach. Of course there is more you need to consider, the number of departments, is the number of departments fixed or does it change all the time.

My recommendation for the static approach, use existing Entra ID security groups or create new ones, because this prevents you from having to add single users to the RLS roles. Of course the Entra ID security groups need to be maintained.

This article explains how to implement RLS: Row-level security (RLS) guidance in Power BI Desktop - Power BI | Microsoft Learn

I consider spending on the book a valuable investment: Row-Level Security in Power BI: The complete guide of creating different views of the data for the same Power BI report : Rad, Reza: Amazon.de: Books

Hopefully, this helps to tackle your challenge.

Regards,

Tom