cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
SLI Regular Visitor
Regular Visitor

security

hello

 my client asked me: 

Can we define security in power BI by user profile via AD? and not going through line-level security in power bi desktop

thanks

 

sabrina,

2 ACCEPTED SOLUTIONS

Accepted Solutions
Moderator v-yuezhe-msft
Moderator

Re: security

@SLI,

You can import email addresses of users from AD to Power BI Desktop, then use USERNAME() function to implement dynamic row level security. You can review the following blog to get more details.

http://radacad.com/dynamic-row-level-security-with-power-bi-made-simple


Regards,
Lydia

Community Support Team _ Lydia Zhang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Moderator v-yuezhe-msft
Moderator

Re: security

@SLI,

The user will only see the data which he has permission on.


Regards,
Lydia

Community Support Team _ Lydia Zhang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
5 REPLIES 5
Moderator v-yuezhe-msft
Moderator

Re: security

@SLI,

You can import email addresses of users from AD to Power BI Desktop, then use USERNAME() function to implement dynamic row level security. You can review the following blog to get more details.

http://radacad.com/dynamic-row-level-security-with-power-bi-made-simple


Regards,
Lydia

Community Support Team _ Lydia Zhang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
SLI Regular Visitor
Regular Visitor

Re: security

Thank you Lydia for your answer

i am beginning to deepen my knowledge of power bi, so i have lots of questions, 

When, we are on power bi and we want to publish on dynamics respecting the roles assigned to each user present in the CRM, how do we do it?

 

Also I would like to know if it is possible to go from an entity in CRM example "accounts" to a synthetic view in power bi of this entity? I know that the opposite is possible using the url of records

 

thanks in advance

 

sabrina,

Moderator v-yuezhe-msft
Moderator

Re: security

@SLI,

I am not very sure about your requirement. Basically, you would need to recreate the role in Power BI Desktop using username() function. Without RLS, it is not possible to directly display data for users based on CRM role.

Regards,
Lydia

Community Support Team _ Lydia Zhang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
SLI Regular Visitor
Regular Visitor

Re: security

effectively i would to use the security based on the profile that is defiened in AD and not by RLS

(the question about the CRM was independant i wanted just have an idea about that, i will come back to this topic later)

So i will use the table extracted from the Active directory, then i will defined the Role on this table by using RLS and the username() function Then i publish the report on the portal of power bi

logically when the user will connect to it power bi he will see only what we have shared with him, is it right?

 

best regards,

 

sabrina,

Moderator v-yuezhe-msft
Moderator

Re: security

@SLI,

The user will only see the data which he has permission on.


Regards,
Lydia

Community Support Team _ Lydia Zhang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.