Pug milano webinar series -dynamic role level security

1. Power BI
Role Level Security Patterns
Lorenzo Vercellati
Power BI Solution Architect
SolidQ

2. https://twitter.com/supergimi
https://github.com/lvercellati
https://www.linkedin.com/in/lorenzovercellati/
Loenzo Vercellati

3. Agenda
• Role Level Security Concepts
• Static Role Level Security
• Dynamic Role Level Security
• Dynamic Role Level Security & Hierarchies

4. Role
Level
Security
Concepts

5. The Basics
Don’t Make
Security an
Afterthought
…

6. The Basics
Plan Out
Security

7. The Basics
Power BI report data
security is based on
ROLES and being a
MEMBER of a Role

8. The Basics
Roles control WHO has
access to the Power BI
Dataset along with
WHAT DATA they have
access to within the
Dataset

9. The Basics
Relies on Azure Active
Directory for user
IDENTIFICATION,
AUTHENTICATION and
AUTHORIZATION to a Power
BI Dataset

10. Roles
Roles are created in
Power BI Desktop
Client

11. Roles
Role Members are
assigned in
Power BI Service

12. Test Security
Check Before Sharing
POWER BI DESKTOP
POWER BI SERVICE

13. Choose Your Own Security Style
STATIC DYNAMIC

14. STATIC
RLS

15. Static RLS
Click on Manage roles

16. Static RLS
Click on Create
Button

17. Static RLS
Select tables and
columns you want
apply the rules on

18. Static RLS
Select the role you
want test

19. Static RLS
Test your rule

20. Demo

21. DYNAMIC
RLS

22. Dynamic RLS
We have to RETHINK
our MODEL

23. Dynamic RLS
We need a system to
filter our data
DYNAMICALLY

24. Dynamic RLS
Users Table with the
Accounts used to
access to
Power BI Service
joe@contoso.com

25. Dynamic RLS
A BRIDGE TABLE to
link users and profiles

26. Dynamic RLS
A profile table to
manage correctly the
MANY-TO-MANY
relationship

27. Dynamic RLS
BIDIRECTIONAL
crossfilter
+
Apply security filter in
both direction
checkbox

28. Dynamic RLS
USERPRINCIPALNAME()
is the key

29. USERPRINCIPALNAME()
It’s a DAX Function that returns the
name of the user as their email address,
aka user@domain.com.

30. Demo

31. Bibliography
&
Links

32. Bibliography & Links
• Reza Rad, Pro Power BI Architecture ed. Apress
• https://radacad.com/unleash-security-patterns-in-power-bi-
webinar-recording-and-materials
• https://www.kasperonbi.com/power-bi-desktop-dynamic-
security-cheat-sheet/

33. Q&A

34. Thanks