security
60 TopicsPower BI changing domain of users in folder security
My company has two domains. Power BI Report Server is installed in DomainA and we have users in DomainA and DomainB. I am able to grant permissions to users from DomainB. Power BI validates the users and I get error messages if the DomainB\username is not valid. However, after a day or so, when I check the security tab for the same folder, it changes from DomainB\username to DomainA\username. Is there a way to avoid that?1.9KViews0likes6CommentsAudience Management Issue: Power BI does NOT order in alphabetical order the users
In a Power BI app, Audience Management has a major issue, where Power BI audience modules DO NOT order in alphabetical order the users and becomes a nightmare to manage 100s of users to even see if they are in a specific group already.... How can I order those audience modules in alphabetical order? or is this just a bad design we have to deal with?1.5KViews0likes3CommentsNeed Help Configuring User Access in Power BI Report Server
Hi everyone, I'm using Power BI Report Server and need some assistance with configuring user access. I want to achieve the following: View-Only Access: Users should be able to view reports without entering a username and password. Administrative Access: For accessing the administrative environment of the report server, entering a username and password should be mandatory. Could anyone guide me on how to set up these configurations? Any advice or practical examples would be greatly appreciated. Thank you very much956Views0likes2CommentsField Parameter
Hi, I am using PBI RS with direct query to Tabular with roles. We want to show a different set of columns in an simple table object depending on roles permissions. Field Parameter seems to be the perfect match ! Is there any plan to include "Field Parameters" in Power BI Report Server ? Thanks and Regards, Ilan454Views0likes1CommentPower BI: Displaying Anonymous Competitor Data with Store-Specific Filters on SharePoint
The situation I'm grappling with is as follows: I've designed a dashboard for a client that displays data from 150 distinct stores. These stores are owned by 55 individuals, with some of them having ownership over multiple stores. The dashboard I developed showcases Key Performance Indicators (KPIs) for each store and contrasts them with the 6 most comparable stores based on 2023 revenue. Users can select a specific store using a slicer to view its data alongside anonymized data of comparable stores. The intention is for owners to cycle through their stores using this slicer without accessing competitors' specific data. While they'll see metrics from competing stores if they're part of the comparison group, the information remains anonymous, ensuring they can't identify which stores they're looking at. I plan to deploy this report on SharePoint. Each owner accesses the report through their unique SharePoint URL, logging in to view the Power BI report tailored to their owned stores. The challenge lies in how to best implement this. Using Row-Level Security (RLS) doesn't seem fitting. This is because it would filter out all rows unrelated to the owner's stores, leading to visuals about comparable stores being devoid of data, as competitor data would be excluded at the row level. I've considered two potential solutions: Deploying 55 separate reports to the Power BI service, one tailored to each owner. The clear drawback is the considerable effort, especially if adjustments are needed later. Cloning the data model. Here, RLS would be applied to one, while the other remains RLS-free for comparison visuals. The downside is that it doubles the data model's size, leading to a notable dip in performance. Neither solution feels optimal, which prompts me to explore alternative approaches.942Views0likes3Commentsdata hidden from administrators
Hi, Is it possible to secure data from all other people than the department which has made the report at uploaded it? Specifically it should not be possible for administrator to see the data. At the moment we are usin RLS but this does not work with administrator of our organization. BR822Views0likes2CommentsCan port 8083 be removed from Power BI Report Server?
We have the Power BI Report Server installed in a system. Our security scan found that Port 8083 is using HTTP instead of HTTPS. Is it safe to delete this "Reserved URL" from the system? Please advise how to mitigate this security issue. Thanks!!1.1KViews0likes0CommentsPower BI Report Server - Custom permissions on folder randomly reverting to inherited
Are there any known issues with putting more than 400 users in the security tab of a folder in report server that will cause it to unexpectedly revert to inherited permissions and wipe out all of the users that were manually granted access to the folder? We are having this issue were one of our admins will go to add a user to a folder and all of a sudden, the custom permissions have disappeared and it reverts to inherited permissions.1.2KViews0likes1CommentCVE-2023-21806 should also be resolved on versions of Report Server at least 6 months old
This vulnerability is too high of a severity to not also address it earlier versions of Report Server with hotfixes or patches. Sept 2022 is still only 6 months away from the most recent version of Power BI Report Server. Forcing everyone to upgrade to Jan 2023 is heavy handed and something a start-up would do, not a Fortune 500 enterprise. Does Microsoft care about Report Server? Likely many paying enterprises will not follow this guidance and will be vulnerable for some time because Microsoft refused to update such recent versions which are vulnerable because of their code. Very dissapointing. CVE-2023-21806 - Security Update Guide - Microsoft - Power BI Report Server Spoofing Vulnerability917Views0likes0Comments