Permissions and report authors

[rylach]

Hi,

Looking at the current RLS and workspace permission concept it looks like PBI does not support report modification and contribution (for own purposes) for users without full permissions for the dataset.

Look at the example:

1. Workspace with edit right for its users - RLS does not work
2. Workspace with view right only - user is not able to download .pbix file or create a copy of the report in his own workspace, possibly basing on other data

What I need is to provide standard, predefined reports and educate the users to be able make their own modifications / versions. They do not need extensive DAX knowledge for that. If I'd prepare a clear, self-explanatory data model, thay could make their own analysis, but it is not possible for now, because I need to give them access to all the data (and I can't - they shoud see only "their" data). 

The only option I see is to create separate views in SQL with permissions for particular users, but it seems to be a huge maintanance overhead.

How do you deal with such scenario?

TIA

Ryszard.

[rylach]

Hi,

Looking at the current RLS and workspace permission concept it looks like PBI does not support report modification and contribution (for own purposes) for users without full permissions for the dataset.

Look at the example:

1. Workspace with edit right for its users - RLS does not work
2. Workspace with view right only - user is not able to download .pbix file or create a copy of the report in his own workspace, possibly basing on other data

What I need is to provide standard, predefined reports and educate the users to be able make their own modifications / versions. They do not need extensive DAX knowledge for that. If I'd prepare a clear, self-explanatory data model, thay could make their own analysis, but it is not possible for now, because I need to give them access to all the data (and I can't - they shoud see only "their" data). 

The only option I see is to create separate views in SQL with permissions for particular users, but it seems to be a huge maintanance overhead.

How do you deal with such scenario?

TIA

Ryszard.

[v-sihou-msft]

@rylach

As @Seth_C_Bauer said, you can build a Tabluar model based on your SQL Tables since the security is defined within SSAS Tabular model. And to make your end users to use this dataset to create a report, you can either create app/content pack, share it to your end users, or you can have them directly "Get Data" from Power BI Servcie in Power BI Desktop. 

Regards,

[Seth_C_Bauer · Accepted solution]

@rylach SQL Server Analysis Services Tabular (Azure Platform as a Service or On premises). By creating the model this way on a server/cloud, you could apply row level security, and give the users access to the model. They can build their own reports, also add additional measures in their reports if they want to, and you manage the single model in one place. Any changes you make, would impact all reports downstream. RLS is applied to the user, so all reports they made would have their view of the data only.