How to implement a sort of Column Level Security

[acitsme]

As far I've understtod Power BI only provides RLS while Column Level Secusity and object level is not available,

Suppose you have a table with units solds and unit price columns by item and you want to show price only to selected people.

Which is the best workaround/technic to implement roles on columns?

[v-jiascu-msft]

Hi @acitsme,

That's the scenario of RLS. For example,

Item        Units sold        Unit price

A             100                    1.4

B             200                     3.4

C             123                     3.5

People 1 can see item A while People 2 can see item B and C.

If you don't want others to see the report, don't share with them or give any permissions to them.

Best Regards,
Dale

[acitsme]

Dear @v-jiascu-msft,

I'm not interested in RLS but in CLS.

In other words, I need person 1 to see JUST Item and Units Sold column while person 2 all columns.

Is there any other solution than create to distict Power BI files and assign and publish them onto two 2 different O365 groups?

Thanks

Antonio

[v-jiascu-msft]

Hi Antonio,

If the end users don't have "Edit" permission, you can add only two columns in a table visual. Then some group only see the two columns. 

If they have "Edit" permission, you can hide some columns in the Desktop. But you have to create at least two files. 

Best Regards,
Dale

[acitsme]

It means that for CLS we need to rely just on groups security and we cannot rely on Power BI RLS. Correct?

[v-jiascu-msft]

Hi @acitsme,

As you said before, Power BI RLS and the CLS (you defined) are two different things. No, we can't rely on Power BI for CLS. You can refer to my first post as an example. The RLS keeps all the columns, which isn't what you need.

Best Regards,
Dale