Power BI - Dynamic role level security
0 likes649 views
This document discusses role level security patterns in Power BI. It begins with concepts like roles controlling access to datasets and what data users have access to. It then covers static role level security where rules are applied to tables and columns. Dynamic role level security is also discussed, which requires rethinking the data model to dynamically filter data using tables like users and profiles linked with a bridge table. Dynamic security relies on the USERPRINCIPALNAME() function. Examples of both static and dynamic role level security are demonstrated. Bibliography and links for additional resources are also provided.
Power BI - Dynamic role level security
- 1. Power BI Role Level Security Patterns Lorenzo Vercellati Power BI Solution Architect SolidQ
- 3. Agenda • Role Level Security Concepts • Static Role Level Security • Dynamic Role Level Security • Dynamic Role Level Security & Hierarchies
- 5. The Basics Don’t Make Security an Afterthought …
- 7. The Basics Power BI report data security is based on ROLES and being a MEMBER of a Role
- 8. The Basics Roles control WHO has access to the Power BI Dataset along with WHAT DATA they have access to within the Dataset
- 9. The Basics Relies on Azure Active Directory for user IDENTIFICATION, AUTHENTICATION and AUTHORIZATION to a Power BI Dataset
- 10. Roles Roles are created in Power BI Desktop Client
- 11. Roles Role Members are assigned in Power BI Service
- 12. Test Security Check Before Sharing POWER BI DESKTOP POWER BI SERVICE
- 13. Choose Your Own Security Style STATIC DYNAMIC
- 14. STATIC RLS
- 15. Static RLS Click on Manage roles
- 16. Static RLS Click on Create Button
- 17. Static RLS Select tables and columns you want apply the rules on
- 18. Static RLS Select the role you want test
- 19. Static RLS Test your rule
- 20. Demo
- 21. DYNAMIC RLS
- 22. Dynamic RLS We have to RETHINK our MODEL
- 23. Dynamic RLS We need a system to filter our data DYNAMICALLY
- 24. Dynamic RLS Users Table with the Accounts used to access to Power BI Service joe@contoso.com
- 25. Dynamic RLS A BRIDGE TABLE to link users and profiles
- 26. Dynamic RLS A profile table to manage correctly the MANY-TO-MANY relationship
- 27. Dynamic RLS BIDIRECTIONAL crossfilter + Apply security filter in both direction checkbox
- 29. USERPRINCIPALNAME() It’s a DAX Function that returns the name of the user as their email address, aka user@domain.com.
- 30. Demo
- 32. Bibliography & Links • Reza Rad, Pro Power BI Architecture ed. Apress • https://radacad.com/unleash-security-patterns-in-power-bi- webinar-recording-and-materials • https://www.kasperonbi.com/power-bi-desktop-dynamic- security-cheat-sheet/
- 33. Q&A
- 34. Thanks