Dynamics F/SCM Customer Experience (CRM) Dynamics GP Dynamics Business Central (NAV) Dynamics SL Power Platform Fabric Copilot

[Anne Major]

We’re starting to build our model for our data warehouse and Enterprise Gateway, but I am struggling to find the answer to one particular question. If our Data Warehouse has multiple levels of security, and credentials with the ability to view everything in a schema is used to create the Gateway connection, then a user with the ability to view everything in a schema creates a report and then packages that into an App to share with the Org.

 

If a user who has restricted access to the data views the report in the app, can they see everything? Or are their credentials used and only presented with data they have permission to?

 

Thanks,

Anne

——————————
Anne Major
——————————

[Anthony Bulk]

Hi ? ?

As long as that report is using a direct query or a live connection to the data source the rows will be filtered based on the credentials the users supplies when they log onto Power BI. This is for a cold or hybrid solution. For Power BI Report server, on premise, the credentials that they use to log onto their computer will be passed to the data source through Power BI Report server.

Let me know if you need any more information.

Regards

——————————
Anthony Bulk
Sierra Systems
@JAnthonyBulk
——————————
——————————————-

[Sara Larkin]

Does the same hold true if we use Windows integrated security (Active Directory groups) in the DW and not database credentials?

——————————
Sara Larkin
Technical Business Analyst
BOKF Tulsa
——————————
——————————————-

[Anne Major]

?I’m sorry, I think I might still be confused. Am I right in saying:

– If the reports is using a direct query or a live connection to the data source then the user’s power BI credentials will be passed on to the DB?

– If Power BI Report server or it’s an on premise source with no live connection, then the users credentials that they use to log onto their computer will be passed to the data source?

– What if we do not use Power BI Report server, and do not use a live connection or direct query, am I right in thinking then what ever credentials we used to initially set up the gateway then the user will have the same level of permission as those log in credentials?

Thanks,
Anne

——————————
AnneMajor
——————————
——————————————-

[Aaron Gernhardt]

It really depends on how you set-up your data source and your security on the data source or in the Power BI.

We are currently attaching to an SSAS tabular model and using Row-level security.  Once our users browse to our “on-prem” Power BI Report Server the reports are configured to pass their credentials through to the connection, thus restricting based on the Row-level security setup on the data source.

——————————
Aaron Gernhardt
——————————
——————————————-