Embed Power BI DB in MS CRM / ADX Portal + authorisation

[jos3bosch]

Hi, in MS Dynamics CRM we store survey data for large international companies / accounts (our customers) with more hierarchic levels (like 'region', 'country', international region', 'global'). Employees provide survey feedback, and survey data are aggregated on region/team level (is first aggregation level), and levels above. Each level will have managers that have user / viewing rights for aggregated data on their own hierarchic level (example: 'country') and also drill down to all 'lower' hierarchic levels (in this example: 'regions'). Other background info:

1. All entities have their own account ID's and linked to each other by parent-child relationships in MS CRM,

2. The survey data are stored on the lowest level account entity records: employees in a region / team provide survey feedback and that data are stored on the region/team entity records. All level above are data aggregrations; in the example above the 'country' level is the aggregation of a n umber of regions in that country, etc.

3. We want to deploy the new MS Dynamics 365 CRM portal = former ADX studio portal for embedding the POwer BI dashboards. This portal has the functionalities to work with CRM entity codes and parameters, to pass that to viewing/user authorisation rights for that portal user. Important: portal users are NOT CRM users (they are our customers); they are stored as contact records, related to an account / company record in MS CRM. The hierarchic level of that related account defines also the authorisation level of the contact record.

Questions: how can we embed the PowerBI dashboards in the CRM / ADX studio portal in a way that:

1. When an external customer logs in, customer contact only views his company/account and only the aggregations for his hierarchic level (= defined in CRM system) and all 'lower' hierarchic levels? Can we achieve this with standard (ADX) portal functionalities (CRM entity codes, parameters???), or do we have to .....??

2. Any hints for further exploration ofr this issue? (Blogs, papers, etc.)?

3. Any other recommandations

Thanks very much! Best, Jos

[v-qiuyu-msft · Accepted solution]

Hi @jos3bosch,

In your scenario, you can use Row Level Security to restrict data access for given users. For more information, refer to this article: Row-level security (RLS) with Power BI.

Then you can use enable "Allow Power BI visualization embedding" in Dynamics CRM to add a Power BI dashboard. See: Embed Power BI visualizations on personal dashboards. Or you can use Power BI Embedded feature to embed in a application. Please refer to below links:

Get started with Microsoft Power BI Embedded

Row level security with Power BI Embedded

Best Regards,
Qiuyun Yu