Managing Confidential information in Reports and Workspace

[cmilligan262]

I have created a workspace for my business units finance team. On it I've been using dataflows to store my reports that I query inside of Power BI. Problem being that one of these reports is the business unit roster that contains confidential information for employees. Currently the only workspace users are people that have acces to this anyway but would soon like to share it with people who don't. I would just delete the information but need it in one of the reports. 

Any information would be helpful on how to limit visibility.

Thank you

[Greg_Deckler]

Row Level Seurity (RLS)

[VasTg]

@cmilligan262 

Look into Row Level Security(RLS). Incorporate that with the confidential table and manually control who should have access to that. All the visuals which uses that table will be blank for other users.

If it helps, mark it as a solution

Kudos are nice too

[cmilligan262]

What about managing access to dataflows? I currently use a the report as a dataflow entity to not have to use a personal gateway. Would I be able to manage who uses the dataflow if I give acces to the workspace?

[v-lid-msft · Accepted solution]

Hi @cmilligan262 ,

Based on my research, we cannot control the permission of dataflow to specific user. How about share only the nessary report to them instead of add them into workspace, it should be able to prevent them access the dataflow, but if this report contain the data from data from workflow, we suggest you to apply Row Level Security.

Best regards,

[nickyvv]

Not sure if the roster data is in a different report, that’s not totally clear to me.
If that is the case, you could publish an app with all the reports in it that can be seen by the users and leave the “private” report in the workspace.
I’ll have to test if users to the app also have access to the dataflows of a workspace, but I don’t think so.