[Ricardo Freitas]

Hi,

I need that some of my Pro users have the possiblity to create new columns in PowerBI, but at the moment they can’t, because PBI reports are connected to a SSAS Tabular models. In that sense i’d like to ask if you think:

1 – it is viable to import data to PBI Service for these Pro users, and then and more important, if it’s possible to prevent the Pro user to Export to PDF, Export through visuals (i think some it’s possible in some of them) and Print.

2 – if the Pro user can then share their reports to users recreating roles (since when importing from Tabular they dissapear…) so that other users whom the report have been shared with can only see “their” specific data.

 

 

Regards

——————————
Ricardo Mota Freitas
——————————

[Vishesh Jain]

Hi ,

?1 – it is viable to import data to PBI Service for these Pro users, and then and more important, if it’s possible to prevent the Pro user to Export to PDF, Export through visuals (i think some it’s possible in some of them) and Print.

—If you are sharing reports with other Pro Users you can prevent them from printing out dashboards and reports by going to Settings >Admin >Portal>Tenant Settings>Disable Printing. You will need to have admin rights of the work space in order to control these settings.

If the reports are shared via PBI Desktop I am afraid you can’t prevent them from being printed.

2 – if the Pro user can then share their reports to users recreating roles (since when importing from Tabular they dissapear…) so that other users whom the report have been shared with can only see “their” specific data.

— you can try to execute Row Level Security (RLS), if you want users to see their own data. You can define RLS and create roles in the desktop and here is a link on how to set it up.

Row-level security (RLS) with Power BI – Power BI

Microsoft		remove preview
Row-level security (RLS) with Power BI – Power BI How to configure row-level security for imported datasets, and DirectQuery, within the Power BI service. View this on Microsoft >

You can even implement the Dynamic RLS based on the Login IDs of the users and here is a youtube link on how you can execute RLS and Dynamic RLS.
Unleash Security Patterns in Power BI – Reza Rad

YouTube		remove preview
Unleash Security Patterns in Power BI – Reza Rad Unleash Security Patterns in Power BI – Reza Rad Follow us on Twitter – https://twitter.com/mspowerbi More questions? Try asking the Power BI Community @ https://community.powerbi.com/ View this on YouTube >

I hope this resolves both your issues.

Thank you,

——————————
Vishesh Jain
Owner
VR Construction
——————————
——————————————-

[Ricardo Freitas]

Hi ?, thanks for your help.

1) The Printing you are mentioning is the option to “export to PDF” on PBI Desktop, or is there a option to print on PBI Service? If there are different things, does this option on PBI Service prevent both things?

2) It is possible to create roles/rules online right? The ideal is to be able to prevent the user to create PBIx files (so users would be limited to PBI Service and “their” active roles), is it possible? Because if the user can download a PBIX file, then we lose security and probably he can remove the roles on the file…

Regards

——————————
Ricardo Mota Freitas
——————————
——————————————-

[Vishesh Jain]

Hi ,

1. The ‘Export to PDF’ feature is only available on the Desktop. So if you are sharing the desktop file with the user, you cannot control the printing. As far as printing is concerned on the service, you can print your screen, as in Ctrl+P and print whatever it on the screen. This can be disabled from the setting that I showed in my previous response.
So I would suggest that you share the files only on the service and yes you can disable them from downloading the PBIX file, provided you have the admin rights.?
However inspite of all the security, you cannot stop anyone, who has access to the report, in any form whatsoever, to take screenshots. There is no way to stop that and I have researched a lot on this. If you find a way to disable screenshots, please do let me know as well.

2. From what I have tested so far, you can disable the sharing and users cannot download the PBIX file to their desktop. Also if they try to save a copy of the report from the service, it only saves, to the workspace and no desktop file is created.
As for the roles, you can create the roles in the desktop file and upload it to the service, like you do a normal publish to service. After that you can assign the roles from the service, to the users that you have shared the report with. That way they can only see their own data.

I highly recommend you to watch the YouTube video I posted in my previous response as it will show you different ways to execute RLS. I know the video is quite long but it provides very good hands on information.

Thank you,

——————————
Vishesh Jain
Owner
VR Construction
——————————
——————————————-

[Derek Dai]

1, either way is not preventable to me
2, role-level security can be controlled in SSAS or PBI cube. No difference to me as well.

——————————
Derek Dai
BI
daijunsh@hotmail.com
2342650101
——————————
——————————————-