Forum Discussion

yoshihirok's avatar
yoshihirok
Icon for Post Prodigy rankPost Prodigy
10 years ago
Solved

Security Issues ? odc file connect may NOT limit by Row-level security

It's seems to security issue.

 

The odc file of 'Analyze of Excel' may not limit by Row-level security.

Please re-check.

 

Repro step.

1. Publish pbix from Power BI Desktop as User A.

2. Sign In to Power BI Service as User A.

3. Share a dashboard to User B from User A.

4. Select 'Security' of the dataset as User A.

5. Create a Row-level security setting of User B to limit the dataset.

6. Open Power BI Service by other browser as private mode.

7. Sign In to Power BI Server as User B.

8. Check that the shared dashboard limitted as User B.

9. Download the odc file by Analyze of Excel as User A.

10. Add 'User [email protected]' in the odc file before </odc:ConnectionString>

11. Open the odc file by Excel 2016.

12. Sign In as User B to Azure Authentication.

13. Create a pivot table.

14. Check that the pivot table does not limit by Row-level security.

 

Does Row-level security affect to odc file connection from Excel ?

 

My environment:

OS: Windows 10 version 10.0.10586

Office: Office 365 ProPlus - Office 2016 x64 version 16.0.6769.2017

 

Regards,
Yoshihiro Kawabata.

 

 

 

 

 

 

  • Analyze in Excel integration with Row-level security is coming soon - 2 weeks.

    I will update when it is available.

     

    Analyze in Excel integration with Row-level security means that Power BI service will apply Row-Level security to Excel connections to Power BI data sets

  • Analyze in Excel integration with Row-level security is available.

8 Replies

  • IlanH's avatar
    IlanH
    Icon for Microsoft Employee rankMicrosoft Employee

    Analyze in Excel integration with Row-level security is coming soon - 2 weeks.

    I will update when it is available.

     

    Analyze in Excel integration with Row-level security means that Power BI service will apply Row-Level security to Excel connections to Power BI data sets

    • yoshihirok's avatar
      yoshihirok
      Icon for Post Prodigy rankPost Prodigy

      Awesome, Thank you ilan Herbst.

      I'm happy this 2 weeks.

       

      Regards,
      Yoshihiro Kawabata

  • IlanH's avatar
    IlanH
    Icon for Microsoft Employee rankMicrosoft Employee

    Analyze in Excel integration with Row-level security is available.

    • yoshihirok's avatar
      yoshihirok
      Icon for Post Prodigy rankPost Prodigy

      Awesome, Awesome, Thank you, IlanH

       

      I will check Analyze in Excel integration with Row-level security.

       

      Regards,
      Yoshihiro Kawabata

      • yoshihirok's avatar
        yoshihirok
        Icon for Post Prodigy rankPost Prodigy

        Hi IlanH.

         

        I can use "Analyze in Excel" and "Row-level security".

         

        My test step:

        1. By Power BI Desktop, I create a report.
        2. By Power BI Desktop, I publish the report to Power BI Service.
        3. By Power BI Service, I create a role in row-level security in security of the data set of the report.
        4. By Power BI Service, I test the role by "Test data as role".
        5. By Power BI Service, I create a dashbard from the report.
        6. By Power BI Service, I share the dashboard to a target account.
        7. By Power BI Service, I select "Analyze in Excel" of the report.
        8. By Excel, I connect Power BI Service as the taget account.
        9. By Excel, I check the data.

        It works nice

        I can share "Analyze with Excel" integrate with "Row-Level security" to our partners/customers/friends.

         

        Regards,
        Yoshihiro Kawabata

    • Rainar's avatar
      Rainar
      Icon for Advocate I rankAdvocate I

      HIi! 

       

      Any info if its possible to implement RLS in an embedded solution? I'd like to create my own .odc file and then connect with using my embedded user.

  • I've had the same issues! It would be great if this was fixed soon!

    • yoshihirok's avatar
      yoshihirok
      Icon for Post Prodigy rankPost Prodigy

      Thank you, dsutt519 for the same issues.

       

      Yes, "Row-level security" is great, "Analyze by Excel" is also great, I want to use both without this security issue.

       

      Regards,
      Yoshihiro Kawabata.