Sensitive data security

[Anonymous]

Hi, 

we are setting a new PBI environment for a client and we are a facing a security problem.

In the target architecture there will be an application management team that will be able to check, edit and deploy new or old reports in this environment.

They will be able to make changes with PBI desktop with a dev source (a copy of the production one) and after that they will be able to publish in the organizational workspace.

The issue is that they MUST not have the access to the production source but if they can publish on a workspace they will be able to download and view production data, how can we manage that?

Thank you so much

[v-shex-msft · Accepted solution]

Hi @Anonymous ,

I'd like to suggest you to add RLS on your datasource and parametrized your connection with query parameters.

Deep Dive into Query Parameters and Power BI Templates

RLS with UserName()
After these steps, you can change datasource on power bi service side and assign correspond roles to control viewed contents.

Using the Power BI Service Parameters to change connection strings (To possibly change between Dev
Notice: RLS not works for edit permission users.

Regards,

Xiaoxin Sheng