Security Issues ? odc file connect may NOT limit by Row-level security

[yoshihirok]

It's seems to security issue.

The odc file of 'Analyze of Excel' may not limit by Row-level security.

Please re-check.

Repro step.

1. Publish pbix from Power BI Desktop as User A.

2. Sign In to Power BI Service as User A.

3. Share a dashboard to User B from User A.

4. Select 'Security' of the dataset as User A.

5. Create a Row-level security setting of User B to limit the dataset.

6. Open Power BI Service by other browser as private mode.

7. Sign In to Power BI Server as User B.

8. Check that the shared dashboard limitted as User B.

9. Download the odc file by Analyze of Excel as User A.

10. Add 'User ID=UserB@xxx.com' in the odc file before </odc:ConnectionString>

11. Open the odc file by Excel 2016.

12. Sign In as User B to Azure Authentication.

13. Create a pivot table.

14. Check that the pivot table does not limit by Row-level security.

Does Row-level security affect to odc file connection from Excel ?

My environment:

OS: Windows 10 version 10.0.10586

Office: Office 365 ProPlus - Office 2016 x64 version 16.0.6769.2017

Regards,
Yoshihiro Kawabata.

[IlanH · Accepted solution]

Analyze in Excel integration with Row-level security is coming soon - 2 weeks.

I will update when it is available.

Analyze in Excel integration with Row-level security means that Power BI service will apply Row-Level security to Excel connections to Power BI data sets

[IlanH · Accepted solution]

Analyze in Excel integration with Row-level security is available.

[Rainar]

HIi! 

Any info if its possible to implement RLS in an embedded solution? I'd like to create my own .odc file and then connect with using my embedded user.

[yoshihirok]

Awesome, Awesome, Thank you, @IlanH

I will check Analyze in Excel integration with Row-level security.

Regards,
Yoshihiro Kawabata

[yoshihirok]

Hi @IlanH.

I can use "Analyze in Excel" and "Row-level security".

My test step:

1. By Power BI Desktop, I create a report.
2. By Power BI Desktop, I publish the report to Power BI Service.
3. By Power BI Service, I create a role in row-level security in security of the data set of the report.
4. By Power BI Service, I test the role by "Test data as role".
5. By Power BI Service, I create a dashbard from the report.
6. By Power BI Service, I share the dashboard to a target account.
7. By Power BI Service, I select "Analyze in Excel" of the report.
8. By Excel, I connect Power BI Service as the taget account.
9. By Excel, I check the data.

It works nice

I can share "Analyze with Excel" integrate with "Row-Level security" to our partners/customers/friends.

Regards,
Yoshihiro Kawabata

[IlanH · Accepted solution]

Analyze in Excel integration with Row-level security is coming soon - 2 weeks.

I will update when it is available.

Analyze in Excel integration with Row-level security means that Power BI service will apply Row-Level security to Excel connections to Power BI data sets

[yoshihirok]

Awesome, Thank you ilan Herbst.

I'm happy this 2 weeks.

Regards,
Yoshihiro Kawabata

[dsutt519]

I've had the same issues! It would be great if this was fixed soon!

[yoshihirok]

Thank you, dsutt519 for the same issues.

Yes, "Row-level security" is great, "Analyze by Excel" is also great, I want to use both without this security issue.

Regards,
Yoshihiro Kawabata.