Power BI Exchange

Expand all | Collapse all

Does restricted data show in reports for users who do not have access to it in a data warehouse?

  • 1.  Does restricted data show in reports for users who do not have access to it in a data warehouse?

    Posted 04-12-2018 12:20 PM

    We're starting to build our model for our data warehouse and Enterprise Gateway, but I am struggling to find the answer to one particular question. If our Data Warehouse has multiple levels of security, and credentials with the ability to view everything in a schema is used to create the Gateway connection, then a user with the ability to view everything in a schema creates a report and then packages that into an App to share with the Org.

     

    If a user who has restricted access to the data views the report in the app, can they see everything? Or are their credentials used and only presented with data they have permission to?

     

    Thanks,

    Anne



    ------------------------------
    Anne Major
    ------------------------------


  • 2.  RE: Does restricted data show in reports for users who do not have access to it in a data warehouse?

    Bronze Contributor
    Posted 04-12-2018 12:53 PM
    Hi ​@Anne Major

    As long as that report is using a direct query or a live connection to the data source the rows will be filtered based on the credentials the users supplies when they log onto Power BI. This is for a cold or hybrid solution. For Power BI Report server, on premise, the credentials that they use to log onto their computer will be passed to the data source through Power BI Report server.

    Let me know if you need any more information.

    Regards

    ------------------------------
    Anthony Bulk
    Sierra Systems
    @JAnthonyBulk
    ------------------------------



  • 3.  RE: Does restricted data show in reports for users who do not have access to it in a data warehouse?

    Posted 04-13-2018 09:51 AM
    Does the same hold true if we use Windows integrated security (Active Directory groups) in the DW and not database credentials?

    ------------------------------
    Sara Larkin
    Technical Business Analyst
    BOKF Tulsa
    ------------------------------



  • 4.  RE: Does restricted data show in reports for users who do not have access to it in a data warehouse?

    Posted 04-16-2018 06:38 AM
    ​I'm sorry, I think I might still be confused. Am I right in saying:

    - If the reports is using a direct query or a live connection to the data source then the user's power BI credentials will be passed on to the DB?

    - If Power BI Report server or it's an on premise source with no live connection, then the users credentials that they use to log onto their computer will be passed to the data source?

    - What if we do not use Power BI Report server, and do not use a live connection or direct query, am I right in thinking then what ever credentials we used to initially set up the gateway then the user will have the same level of permission as those log in credentials?

    Thanks,
    Anne

    ------------------------------
    AnneMajor
    ------------------------------



  • 5.  RE: Does restricted data show in reports for users who do not have access to it in a data warehouse?

    Posted 04-16-2018 07:27 AM
    It really depends on how you set-up your data source and your security on the data source or in the Power BI.

    We are currently attaching to an SSAS tabular model and using Row-level security.  Once our users browse to our "on-prem" Power BI Report Server the reports are configured to pass their credentials through to the connection, thus restricting based on the Row-level security setup on the data source.





    ------------------------------
    Aaron Gernhardt
    ------------------------------