Object-Level Security in Power BI

Подписаться 71 тыс.

Просмотров 34 тыс.

50% 1

In this Power BI tutorial, you’ll learn how to lock down your data model using Object-Level Security (OLS). Not to be confused with Row-Level Security, OLS doesn’t simply hide rows of data from the end user. OLS instead hides whole tables or columns!
In the video, we decide to hide an entire column pertaining to sales revenue. From then on, the end user will not be able to see this column in their report, nor will they be able to see any measures that rely on the column! It’s important to note that this security applies when the user views the report, when the user analyzes the model with Analyze in Excel, and when the user connects to the dataset within Power BI Desktop. It completely hides the restricted columns/tables/measures, almost as if the items don’t exist at all!
--------------------------------------------------------------------------------------------------
To enroll in my introductory or advanced Power BI courses:
training.bielite.com/
Blog Post/PBIX Download:
bielite.com/blog/object-level...
Elite Power BI Consulting:
bielite.com/
Data Insights Tools:
www.impktful.com/
Tabular Editor:
github.com/otykier/TabularEdi...
Connect with me on Twitter!
/ powerbielite
0:00 Intro
0:55 Setting up OLS
6:46 Viewing as User
9:39 Outro

Наука

Опубликовано:

29 июл 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 56

@927dice 3 года назад

Awesome as usual Parker! Great complete run down of OLS

@bravucod 3 года назад

Exactly what I needed. Thanks !

@BIElite 3 года назад

Glad to hear!

@TitansLacrosse34 3 года назад

This is so helpful, thank you!

@BIElite 3 года назад

Great to hear!

@Mahshadn 3 года назад

Great content! Thanks! It would be great if you make more content about security in PBI and sharing/presentation of dashboards to others.

@BIElite 3 года назад

Hi Mahshad, thanks for the suggestions! I'll think about creating more content around security and presenting in the future.

@leniorrb 3 года назад

Very nice content! I was looking into this for a long time and couldn't find a solution. In the example, you used a RLS rule specific to hide the Unit Price for all users assigned to that. Do you tried combine the object level security with an expression level security?

@tejasbrahmbatt5344 3 года назад

Is it possible to give a better message to users who don't have access to Unit Price. The cross (x) makes business users feel something is broken. A good Message like - "data for sales team hidden" etc would be beneficial..

@BIElite 3 года назад

Agreed! I'll post a follow-up video if I can figure something out.

@RafaMaculewicz 3 года назад

This is bananas!!! Thanks!

@denwo1982 2 года назад

Hi, I still want the visualisations to work but the column that we want to hide can it not be set to BLANK or NULL ? Users will think the report is broken when they see the visualisation error? Not what we wanted when this was asked on the ideas section

@gkirankumarskht 8 месяцев назад

Awesome ., it's really useful. Thank you

@roberttyler2861 3 года назад

Up until now its just been a similar piece but by using RLS. I guess this makes it slightly easier. unless I'm missing something?

@user-lm5wb8vi1x 3 месяца назад

Finished watching

@mirrrvelll5164 2 года назад

Great video!! I was into this topic since yesterday, did report but we are not sure how to protect them, I mean, tables/columns and so on. This was great how you explained, so that means after I am done with "tabular editor" and defining who can see what, then in RLS defined users wont see anyways those parts, but if I have more users? Can be applied for all of them at once or I need to go to tabular editor and check anytime? Second thing, what if I got table as a visual, and there my columns with numbers that other cant see, it will give this viz error on all the table but not only on one-two measures that I wanna? IF you understand what I say, if you got an error in table viz then whole viz is in error but not the column.... any workaround for that?? Thanks

@jrazafindrabe5229 3 года назад

Hi Parker, Would you create a Video about "Row Level Security" (and probably with Tabular Editor). Thanks.

@AntRogers 3 года назад

Do you know if it’s possible to set the default value to none? I’d like the default to be that any new table I add to the data model is not accessible unless I proactively expose it.

@batava 3 года назад

Is it possible to combine RLS with OLS? Say I want a user to not be able to see the cost information for a certain product? Or hide information from accounts containing text decription of wages?

@bi3026 3 года назад

What is difference between rls n ols?

@DanielWeikert 3 года назад

Thanks for sharing. Any idea whether there is an option to handle the visual errors? From a user friendly perspective if someone has no access rights it should display a message for that instead of the default visual break "something went wrong"

@BIElite 3 года назад

Hey Daniel, that's the million dollar question. I'll post something if I can figure something out!

@rayemeric6532 2 года назад

@@BIElite thanks for this great video. Is there any news regarding the visual errors? thanks!

@bandaralqahtani4356 2 года назад

Amazing new subscriber :)

@BIElite 2 года назад

Nice, welcome Bandar!

@shodhan Год назад

Is it possible to set up that only certain user can access data and all others can not? I want the default to be no access for all and certain specific users can see it

@officesuperhero9611 3 года назад

I think all Power BI users have waited for this for years. Thanks! But why is there a download? Is this additional add-on a Microsoft product? Argghh. Microsoft always makes things so complex.

@BIElite 3 года назад

Hey Richard, I agree with you. Though Tabular Editor is GREAT, it's still a 3rd-party tool. It seems like Microsoft is going to rely heavily on 3rd-party tools to pick up some of the slack. Hopefully these functionalities (OLS, calculation groups, etc.) move into Power BI Desktop at some point in the future.

@pavel5362 3 года назад

Is it possible to hide specific pages for different roles?

@BIElite 3 года назад

Not out of the box, but you can set up navigation buttons with conditional logic. It’s not a 100% solution, because people can still navigate to certain pages if they know the exact URL. But couple that with OLS and it won’t matter that much 😊

@mdhidayat5706 3 года назад

Cool OLS! Just wondering if can display the visual something like "Restricted Data" instead of "something's wrong with one or more fields".

@BIElite 3 года назад

Thanks Md! I agree, and I'll try to think of a way to do what you're saying.

@totvabe1 3 года назад

@@BIElite It would be interesting in terms of quality of visualizations. It's kind of shabby show the errors … .👍

@ionpt 3 года назад

I have tried to instantiate as table() in m query but still not working. I will keep trying also. Let me know if you find how to deal with the visual error

@v.s.5460 2 года назад

What if I need the users to be able to see the visual except for one specific measure which is part of it? Also, can this error message be customized? If users see this message they won't know their access is restricted, it looks like there is something wrong with the report and they will probably start sending tickets.

@helloranjan89 Год назад

Looks ugly when that visuals break. Anyway to solve it on report level ?

@indhumathi4727 3 года назад

Also is there any way we can change the way it appears with a cross mark

@BIElite 3 года назад

Not that I know of... I was thinking of ways to get around this. I'll let you know if I find something.

@indhumathi4727 3 года назад

@@BIElite great.. If some feature to control this, then roles will be much effective. Users always want control of images, pages through roles..

@Baldur1005 3 года назад

Well, that’s why it is not great when report making. Maybe if there is DAX function which can read the viewing user role (something like USERNAME()) then some buttons would do the trick. Maybe in future MS will implement option where won’t be full removal of object but values in that object will be shown as blanks instead. Now the biggest benefit are build permissions and composite models

@indhumathi4727 3 года назад

We have this feature in ssas as well

@BIElite 3 года назад

Very true Indhu

@jeyapauldavid5596 2 года назад

👍

@CJ-jc8tn 3 года назад

Hi Parker - Thank you for sharing information on Object Level Security. However, I cannot see myself implementing this any time soon given the user experience of seeing these error messages : ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-PAX5GP9SkTA.html Is there a more graceful way of handling such errors from an OLS standpoint -- otherwise, I can just imagine all the requests coming in about a 'broken' dashboard :) Thanks

@shownormality 2 года назад

+1 here. I was really hopeful about this feature at first place, but the error tiles in reports are making it impossible to use right now. Shouldn't be very hard for Microsoft to handle it more elegantly from the UX persepective.

@denwo1982 2 года назад

Yes correct, I will not be able to use this, I was hoping that the object would still show but the value would replaced with BLANK or NULL. Microsoft have let themselves down again, not sure what they are doing there but their releases for power bi have been awful, the recent one export to excel “Data with current layout” just shows that. Bring back Bill Gates he needs to overlook the Power BI department.

@pietjehans206 2 года назад

Pretty useless if it breaks visuals. In RLS I just let them return blanks so this preven the report from breaking. Only downside is that PBI doesnt support dynamic measure display names, so it will still show the name of the measure, but returns all blanks.

@bagpipe2411 2 года назад

Hi. Could you explain how you let them return blanks using RLS?

@pietjehans206 2 года назад

@@bagpipe2411 pretty easy but hard to explain in a comment. Just make a table with 2 options. In your RLS force a role to 1 of the options, then create a measure with IF statement with SELECTEDVALUE. If it doesnt meet requirement it will return blank

@bagpipe2411 2 года назад

@@pietjehans206 could you expand a bit more on the IF statement and selectedvalue thing? Also, I'd have to apply this to every visual right?

@pietjehans206 2 года назад

@@bagpipe2411 no, not for every visual, but that is also possible. Just type a measure like IF SELECTEDVALUE(newtabel[hide]) = forcedRLSselection, then x else blank

@bagpipe2411 2 года назад

@@pietjehans206 what exactly is "x" here? sorry, im pretty new to pbi :(