Separate credentials for each workspace - Security issue

Question

I have 2 workspaces on Power BI service. They are using the same report that uses a ODATA source (Microsoft management API) and I need to have in each one different credentials because are data of different companies.

I don't need to use any gateway

I configure the two datasets with different users from different companies (tenants). Initially it does the logging process with microsoft correctly. But, when I refresh the two workspaces load the data using the same credentials.

However, that same report uses the azure cost connector and that one works perfectly.

It is an important security problem because a client can see the data of another company

Could you please help me?

Thanks in advance

v-xuding-msft · Answer

Hi&nbsp;SEACHAD&nbsp;,
Please configure&nbsp;Row-level security (RLS) in Power BI Desktop to have a try and then republish to Service.
&nbsp;
The report is using the same credential and that they viewed is the same one. For this situation, it is a best solution to try RLS. It can be used to restrict data access for given users. You could use&nbsp;the username() or userprincipalname() DAX function to implement dynamically.
&nbsp;
Please reference:
Row-level security (RLS) with Power BI&nbsp;
Power BI Row-Level Security And Where To Filter&nbsp;
Can you use GROUPS with Power BI Row-Level Security (RLS)???&nbsp;

seachad · Answer

Thank very much for your answer, but this solution will no solve my problem.Surely I have not explained my problem well.I have created a report on powerbi desktop that, among other data sources, connects to the Microsoft management API and also uses the Azure cost connector.I have created two diferent workspaces, Company A and Company B and I have uploaded the report to the Power BI serviceIn each of the workspaces. I have configured the credentials for the management API data source with a different user corresponding to each company (workspace company A -&gt; user@companyA.com and for the workspace of company B -&gt; user @ companyB.com) as well as the tenant (parameter) and the user corresponding to each one in the cost connector data source.&nbsp;I have created an application for each of them.The objective is to see in each application only the information corresponding to each of the companies.&nbsp;Now when I update the datasets in the company A application I see the cost data of company A (cost connector) and, for example the user data (API management) of company A, perfect.&nbsp;But in the application of company B I see the cost data of company B but the azure users data of company A?How is this possible if I have configured the access credentials of a user from a different company in that data source?&nbsp;Thank you&nbsp;Luis

pvravestein · Answer

Did you find a solution here? I had 5 different companies working for some time but after adding last company (to intune datawarehouse) the credentials used for the last company are now active for all other companies as well. So all companies have the same data?&nbsp; &nbsp;And this is not the first time I run into this problem,

pvravestein · Answer

ok. nevermind. My bad.&nbsp; This is all due to our VPN connection. I disconnect from VPN and everything starts working again. very strange.

manuelaosorio · Answer

Hi Seachad,&nbsp;Could you solve this? I have the same error and I don't know how to solve it

Forum Discussion

Separate credentials for each workspace - Security issue

Related content

Architecture decision : Separate workspaces

Destruction of credentials

Separate credentials for each workspace - credentials issue

credential management best practices?

PowerBI Workspaces