cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
mstefancik Member
Member

Deployment and security

Hello,

 

I have got question about deployment process of .pbix file.

 

Scenario:

 

I have got 1 .pbix file with created complex model and all the reports: global report, 3 reports(Department1 report, Department2 report, Department3 report), personal report, customer report

 

Deployment scenario should be: all employees are divided into 4 groups with these security:

 a. managers - can see all the reports without restrictions, 2 managers can edit reports(responsible for poublishing reports), others can only view

 

 b. department1 - can see report Department1 (all data), personal report (every employee should see only his data), customer report (every employee should see only his customers data) - every user can only view reports and can not edit

 

 b. department2 - can see report Department2 (all data), personal report (every employee should see only his data), customer report (every employee should see only his customers data) - every user can only view reports and can not edit

 

 b. department3 - can see report Department3 (all data), personal report (every employee should see only his data), customer report (every employee should see only his customers data) - every user can only view reports and can not edit

 

What is best scenario to deploy such solution? What to leverage? groups, content packs, how to setup security, how many roles do I need?

 

Could anybody provide my steplist?Very appreciated.

 

Thank you

1 REPLY 1
Moderator v-yuezhe-msft
Moderator

Re: Deployment and security

Hi @mstefancik,

To meet the above requirement, you can create a group in Power BI Service and configure Row-level security (RLS) on datasets in Power BI Desktop. With Group in Power BI Service, you can control that managers can modify the group’s content and other employees can only view the group’s content. For more details about creating group in Power BI, please review this article.

Besides, before you publish the report to Power BI Service, configure RLS on datasets to restrict data access for given users in Power BI Desktop. You would need to define different roles based on your scenario. For more details about RLS, please review this article.

Also please note that the RLS feature is available in the latest version of Power BI Desktop, you can download the desktop from this link. In addition, the RLS feature at this stage is still in preview mode, if you have any feedbacks about this feature, you can submit your idea on the Power BI Idea forum: https://ideas.powerbi.com/forums/265200-power-bi-ideas .

Thanks,
Lydia Zhang

Community Support Team _ Lydia Zhang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Helpful resources

Announcements
New Kudos Received Badges Coming

New Kudos Received Badges Coming

Kudos to you if you earned one of these! Check your inbox for a notification.

Power Platform World Tour

Power Platform World Tour

Find out where you can attend!

Top Solution Authors
Top Kudoed Authors (Last 30 Days)
Users online (4,828)