Sharing an app - Security

[Benc7777]

Morning all,

I hope some kind person can help.

So i have created a new report, and I want to share this with a customer.

So I have written the SQL statement to only fetch this customers data.

I have created the report and created an app, I was going to create a user within my org - customer@mycompany.com

So my question is how would i set this user to soley view the visual and nothing else, no editing, no viewing of data apart from the visual, no viewing of query and no editing query.

Has anyone else done something similar am i doing this the correct way ?

If anyone could help at all i would really appricaite it.

Thanks

B

[Anonymous · Accepted solution]

Hi, @Benc7777 

You can create a read-only role in your reporting tool. This role should only allow you to view the visualization and not any of the underlying data, queries, or editing capabilities. Assign this read-only role to the user customer@mycompany.com. This restricts their access to only what you want them to see. 

Or implement row-level security to ensure that users can only see their specific data. This can be done by defining security filters in SQL queries or by setting them in the reporting tool.

It is also possible to use the APP, without selecting the following options, users can only view your report and cannot modify it

How to Get Your Question Answered Quickly

Best Regards

Yongkang Hua

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[Benc7777]

Thanks this sounds like a plan ! Thanks for your time, I shall investigate and test.

[lbendlin]

You MUST implement the full Power BI Embedded (app owns data) scenario to have even a minimal chance at controlling this.

[Benc7777]

Thank you

Oh, thats disappointing, so giving the customer a report within an app is not a good idea ?

I think the embedded is huge amount of money isnt it ?

[ibarrau]

Hi. If you want to share just one single visual, you could pin it to a dashboard and just share the dashboard removing the hyperlink of the tile that redirects to report. If you would like to let them at least use some filters, then create a report with the single visual and filters. If you want to share it via Power Bi App, add the report at the Apps and create an audience with just that report removing the settings that let them reshare or build.

Those strategies should let the customer only see the dashboard or report with the visual.

I hope that helps,

[Benc7777]

Thank you,

Im just worried that a savvy customer could change the sql script in some way