security

[SLI]

hello

 my client asked me: 

Can we define security in power BI by user profile via AD? and not going through line-level security in power bi desktop

thanks

sabrina,

[v-yuezhe-msft · Accepted solution]

@SLI,

You can import email addresses of users from AD to Power BI Desktop, then use USERNAME() function to implement dynamic row level security. You can review the following blog to get more details.

http://radacad.com/dynamic-row-level-security-with-power-bi-made-simple

Regards,
Lydia

[v-yuezhe-msft · Accepted solution]

@SLI,

You can import email addresses of users from AD to Power BI Desktop, then use USERNAME() function to implement dynamic row level security. You can review the following blog to get more details.

http://radacad.com/dynamic-row-level-security-with-power-bi-made-simple

Regards,
Lydia

[SLI]

Thank you Lydia for your answer

i am beginning to deepen my knowledge of power bi, so i have lots of questions, 

When, we are on power bi and we want to publish on dynamics respecting the roles assigned to each user present in the CRM, how do we do it?

Also I would like to know if it is possible to go from an entity in CRM example "accounts" to a synthetic view in power bi of this entity? I know that the opposite is possible using the url of records

thanks in advance

sabrina,

[v-yuezhe-msft]

@SLI,

I am not very sure about your requirement. Basically, you would need to recreate the role in Power BI Desktop using username() function. Without RLS, it is not possible to directly display data for users based on CRM role.

Regards,
Lydia

[SLI]

effectively i would to use the security based on the profile that is defiened in AD and not by RLS

(the question about the CRM was independant i wanted just have an idea about that, i will come back to this topic later)

So i will use the table extracted from the Active directory, then i will defined the Role on this table by using RLS and the username() function Then i publish the report on the portal of power bi

logically when the user will connect to it power bi he will see only what we have shared with him, is it right?

best regards,

sabrina,

[v-yuezhe-msft · Accepted solution]

@SLI,

The user will only see the data which he has permission on.

Regards,
Lydia