One Report populated with different data based on Active Directory restrictions

[raymond]

Hey Community,

we are setting up PowerBI Server and have a specific question regarding roles and restrictions 

Situation is the following

• Our Active Directory contains all roles in the entire company
• Currenty we deliver excel reports to each stakeholder
• Based on the role of the stakeholder - each one gets different data in his excel report after hitting a "load data" button
• Hence when board member uses this report and automatically populates it with data he gets the entore company data -- if a country manager uses the exact same report and populates it with data he only gets the country data

Whats happening

• A user logs in
• User gets identified 
• based on the identified role, data restrictions are derived 
• however this restriction is defined, the user only sees data relevant for him

Where we want to go

• we want to create powerBI reports
• one single report should show different levels of data
• hence the board member should use this report A and see all data -- a country manager uses this report A and sees only his contries data

Questions

• Can this generally be achieved with powerbi RS?
• Can we control this with our active directory?
• Can powerbi RS derive the roles from our active directory and set restrictions to reports?

Looking forward to get your ideas and insights!

[v-yuezhe-msft]

@raymond,

Power BI Desktop can't  derive roles from your Active Directory, you would need to define Row Level Security(RLS) in Power BI report.

If you have a live connection  to SSAS, it is possible to use Power BI Desktop report server to create report, and you would need to define roles in SSAS side, for more details, please review this article.

However, if you connect to other data sources, you would need to use Power BI Desktop to create report, and define rls in Power BI Desktop.

Regards,
Lydia