I have about hounded something roles (to be used by RLS - Row Level Security) to be defined in single power BI report. Is there any more effective option than using "Manage roles" feature? Adding one by one works but takes too much time.
Related
I'm exploring Power BI RLS. I understand that roles (along with the filter criteria) are to be created in the PBI desktop and users are to be added into the roles via the PBI service. Then, when a user opens the report, the RLS will automatically show only those rows that satisfy the filter criteria.
This question is to ask - how does RLS behave with dashboard tiles? For example - say visuals from multiple reports (each report having RLS) are pinned as tiles onto a dashboard.
Does opening a dashboard ensure that RLS is applied to the pinned visuals?
I have read it somewhere that dashboards retain the tile values for 15 minutes. Does this also mean that RLS is also cached? For example - say RLS membership is updated, then will the dashboard tile immediately reflect the visual tile based on the new RLS?
yes RLS applies to pinned visuals in a dashboard. it applies in the same way as a report. Cache is a browser setting. You might also want to explore Goals while you on the same topic.
While working on Power BI, I have to show few columns from TABLE visual to specific set of users and hide for others.
So, till now I have created two ROLE in Power BI and added users but unfortunately, I am not able to hide and show TABLE Columns as per ROLE.
At this point - Column Level Security and Hiding Columns is not something one can achieve with Power BI.
Kindly see this Post on Power BI Ideas.
I'm using Power bi service along with power bi desktop version.
What I'd like is to spend less time on setting up UI for my charts.
Let's say I have multiple accounts with power bi datasets in them (hybrid dataset to be able to display data in real-time).
Currently I have to create report on each of them, set up charts etc. I expected to create pbix file once and then just publish it to different accounts. But when it comes to reports bound with power bi datasets, it is no longer possible. Even if account already has exactly the same hybrid dataset.
Any ideas on how to implement portable reports?
If I got your point correctly, you have multiple accounts and in each of them you have the same dataset. You want to create open report, which you will publish to all of these accounts. I do not understand why do you need to create a new report for each of your accounts. Why not just change the data source of your report prior publishing it to each of these accounts?
Also it is not clear, how these datasets are created. I think there are two possible options here - these datasets are published with your report, or they are existing datasets not published with this report.
In the first case, just design your report, getting data from your database, and publish the report in each of your accounts. You could change the data source prior every publishing, if your different accounts/datasets should get data from different databases.
In the second case, when you design your report, do not get data from the database, but connect the report to the Power BI Service itself:
and pick the existing dataset:
Before each publish change the account you are logged in, change the data source of the report and select the dataset from the corresponding account. This way when publishing the report, the dataset will not be overwritten, but will be shared between this report and any other report who uses it.
To change the data source of your report, in the drop down of "Edit Queries" button, select "Data source settings" and then click "Change Source..." button.
In both ways you will design your report only once, but it will be published in different accounts using different data.
Are all of your users in the same tennant/company?
If so, create a workspace. Create your report which uses another power BI dataset as its source. Turn on row level permissions. Share the new report to all people. They will only see the data relevant to them and you will only need to maintain one report.
Row level security in power bi
I have used Power BI Service with Multiple Reports/Users in Same Organization with Shared Data Sources using different Reports for each user using the same Datasets.
From your Admin Account (eg. it#contoso.org) Publish all the Reports and once its working from Online (after configuring Gateway and DataSources). Download the PBIX Report File from Power BI Online.
Using Admin Account go to Dataset Settings and Allow the users who will use reports using this datasets to Publish Reports using this Dataset (further security to use dataset i.e. Even if they get the source PBIX File and upload it they wont get access to the data).
Login using the Users Power BI Account (must be within Same Organization, eg. contoso.org) then upload the Same PBIX Report File which was downloaded Earlier from Power BI Web Portal (do not publish via the Desktop App), its more efficient and cleaner on Accessing the Data through Web/Devices.
Now the reports as already they are using the same shared Datasets, the reports will be running fine and the data source settings only have to be done once from Admin User.
And for any further databases Administration only One Admin Account need to be used to access and modify the Data Source Settings.
I am running in this strange issue:
first I prepared some report with power BI desktop
then I go into "Manage Role" to create a rule that show data only for region ="Italy"
I upload the report to the power BI Services
I go to the security tab under dataset and associate some users (myuser#mytenant.com) to the rule
Finally I create a sharepoint page, where I embed the reports I prepared
When I access the report with myuser#mytenant.com I see all the data and not only the region = "Italy" as desired.
What is wrong with the rule?
Another strange thing is, testing the rule is fine, when I test an user the rule doesn't work...
Anybody anyidea?
thx a lot!
The typical "gotcha" is that the Power BI App Workspace (group) settings are left to the default: Members can edit Power BI content. For RLS to work, this needs to be changed to Members can only view Power BI content.
You make this change by logging in to app.powerbi.com (as a group admin), and using the left nav to choose the App Workspace (group) and then Edit Workspace.
This is described in the doco:
https://learn.microsoft.com/en-us/power-bi/service-admin-rls#using-rls-with-app-workspaces-in-power-bi
If you publish your Power BI Desktop report to a workspace within the Power BI service, the roles will be applied to on read-only members. You will need to indicate that members can only view Power BI content within the workspace settings.
Note:
If you have configured the workspace so that members have edit permissions, the RLS roles will not be applied to them. Users will be able to see all of the data.
official documentation: Using RLS with workspaces in Power BI
Is it possible in Power BI power query to connect from A.pbix report to the results of other B.pbix report? If so, how? The reason for doing this is that in A.pbix we have one sort of aggregation - say many monthly reports for one country, and in B.pbix we have another, second stage, sort of aggregation - say one report for all countries.
There are reasons for keeping it separated - tidiness, possibility to refresh single source, lower memory used.
The best option for this architecture is to publish B.pbix to a Workspace in the web service (app.powerbi.com) and then start A.pbix by connecting to the B.pbix dataset via Online Services / Power BI service.
That will make the entire dataset from B.pbix available for re-use. You only need to worry about query / model maintenance and refresh on the B.pbix dataset. Varying visuals on the report pages you build in A.pbix and B.pbix should meet your requirements.
It's described in some detail here:
https://learn.microsoft.com/en-us/power-bi/desktop-report-lifecycle-datasets