Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Earn the coveted Fabric Analytics Engineer certification. 100% off your exam for a limited time only!

Reply
repl-satyveer-s
Regular Visitor

Pulling Report data filtered by backend user permissions

First time powerbi user. Wanted to validate my approach to one of the problems am facing while embedding a powerbi report into a company webpage.

Scenario:

 

We have integrated a powerbi report on one of our site's page. The page shows analytics data that is filtered according to user's role and permission in the website's backend.

 

To achieve the same result for powerbi report, I basically created copies of the master report and duplicated the report's backing dataset. Each of the dataset basically has a user specific accesstoken that allows the dataset to pull only user specific data.

Master Report - master Dataset with parameter 'access-token.

UserA - UserA copy of report - UserA copy of dataset with access-token=userATokenvalue.

UserB - UserB copy of report - UserB copy of dataset with access-token=userATokenvalue.

.

.

repeat this for all users in the system.

 

At this point I am thinking, this is a stupid way to provision users and configure reports for them. I do not know how to do this better. Any nudge, push, is welcome.

 

Note:

I am aware of row level filtering of data in power-bi reports but that is not an option for us as we cannot pull roles to filterby in the dataset.

We have the 'App Owns Data' scenario usage.

 

 

 

2 REPLIES 2
v-jiascu-msft
Employee
Employee

Hi @repl-satyveer-s,

 

RLS (row level security) could be the best choice. Why can't you do that? Please refer to embedded-row-level-security and service-admin-rls.

What's your scenario? App Owns Data or User Owns Data.

 

Best Regards,

Dale

Community Support Team _ Dale
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Thanks for the reply.

 

So our scenario is 'App owns data'.

Say the dataset returns rows of 'project' information. The access to any project object is a determined in the backend by a complex logic of user's permission, role, per-object access etc.

For instance, if we have ProjectA, ProjectB, ProjectC in the system a user can have access to any permutation and combinatin of that set depending upon access roles, rules defined elsewhere in the backend. It is not possible to import all that into report dataset.

Helpful resources

Announcements
April AMA free

Microsoft Fabric AMA Livestream

Join us Tuesday, April 09, 9:00 – 10:00 AM PST for a live, expert-led Q&A session on all things Microsoft Fabric!

March Fabric Community Update

Fabric Community Update - March 2024

Find out what's new and trending in the Fabric Community.