Sharing sensitive dataset data for others to build reports

[guyatisk]

I work in healthcare and we have the HIPAA requirements when it comes to data, etc.  We are venturing into using some power bi reporting for tabular / paginated reports and KPI reporting.  For now, we have a committee in IT to take up the request and create these reports, however, some in the organization now want us to provide the datasets so they can create their own reports.  Keeing in mind HIPAA and row-level security, etc, is this something that can be done?  Does anyone have a similar experience?  Are there any articles or knowledge bases out there for this?  

We would love to be able to supply end users with the electronic health record database tables and allow them to create their own reports on the fly, but we also need a way to see who has access to the data, who is using it, how it is being disbursed.  Also, is there an audit trail when it comes to people who are viewing or using a report from a workspace?

Thanks for any helpful information in regard to this.

[aj1973 · Accepted solution]

Hi @guyatisk 

Yes, you can create Dataflows that can be reused from different End users to build their own reports or simply create a Dataset(Sort of a DWH) and publish it to a workspace where End users can use it to publish reports to their own Workspaces.

To control and monitor who has access to what, you will need to build an Audit Log report using Power BI REST APIs.