Object-Level Security in Power BI

No video

Object-Level Security in Power BI

Рет қаралды 34,496

BI Elite

Күн бұрын

Пікірлер: 56

@927dice 3 жыл бұрын

Awesome as usual Parker! Great complete run down of OLS

@user-lm5wb8vi1x 4 ай бұрын

Finished watching

@denwo1982 2 жыл бұрын

Hi, I still want the visualisations to work but the column that we want to hide can it not be set to BLANK or NULL ? Users will think the report is broken when they see the visualisation error? Not what we wanted when this was asked on the ideas section

@tejasbrahmbatt5344 3 жыл бұрын

Is it possible to give a better message to users who don't have access to Unit Price. The cross (x) makes business users feel something is broken. A good Message like - "data for sales team hidden" etc would be beneficial..

@BIElite 3 жыл бұрын

Agreed! I'll post a follow-up video if I can figure something out.

@Mahshadn 3 жыл бұрын

Great content! Thanks! It would be great if you make more content about security in PBI and sharing/presentation of dashboards to others.

@BIElite 3 жыл бұрын

Hi Mahshad, thanks for the suggestions! I'll think about creating more content around security and presenting in the future.

@TitansLacrosse34 3 жыл бұрын

This is so helpful, thank you!

@BIElite 3 жыл бұрын

Great to hear!

@bravucod 3 жыл бұрын

Exactly what I needed. Thanks !

@BIElite 3 жыл бұрын

Glad to hear!

@DanielWeikert 3 жыл бұрын

Thanks for sharing. Any idea whether there is an option to handle the visual errors? From a user friendly perspective if someone has no access rights it should display a message for that instead of the default visual break "something went wrong"

@BIElite 3 жыл бұрын

Hey Daniel, that's the million dollar question. I'll post something if I can figure something out!

@rayemeric6532 2 жыл бұрын

@@BIElite thanks for this great video. Is there any news regarding the visual errors? thanks!

@officesuperhero9611 3 жыл бұрын

I think all Power BI users have waited for this for years. Thanks! But why is there a download? Is this additional add-on a Microsoft product? Argghh. Microsoft always makes things so complex.

@BIElite 3 жыл бұрын

Hey Richard, I agree with you. Though Tabular Editor is GREAT, it's still a 3rd-party tool. It seems like Microsoft is going to rely heavily on 3rd-party tools to pick up some of the slack. Hopefully these functionalities (OLS, calculation groups, etc.) move into Power BI Desktop at some point in the future.

@roberttyler2861 3 жыл бұрын

Up until now its just been a similar piece but by using RLS. I guess this makes it slightly easier. unless I'm missing something?

@gkirankumarskht 9 ай бұрын

Awesome ., it's really useful. Thank you

@mdhidayat5706 3 жыл бұрын

Cool OLS! Just wondering if can display the visual something like "Restricted Data" instead of "something's wrong with one or more fields".

@BIElite 3 жыл бұрын

Thanks Md! I agree, and I'll try to think of a way to do what you're saying.

@totvabe1 3 жыл бұрын

@@BIElite It would be interesting in terms of quality of visualizations. It's kind of shabby show the errors … .👍

@ionpt 3 жыл бұрын

I have tried to instantiate as table() in m query but still not working. I will keep trying also. Let me know if you find how to deal with the visual error

@shodhan 2 жыл бұрын

Is it possible to set up that only certain user can access data and all others can not? I want the default to be no access for all and certain specific users can see it

@pavel5362 3 жыл бұрын

Is it possible to hide specific pages for different roles?

@BIElite 3 жыл бұрын

Not out of the box, but you can set up navigation buttons with conditional logic. It’s not a 100% solution, because people can still navigate to certain pages if they know the exact URL. But couple that with OLS and it won’t matter that much 😊

@AntRogers 3 жыл бұрын

Do you know if it’s possible to set the default value to none? I’d like the default to be that any new table I add to the data model is not accessible unless I proactively expose it.

@indhumathi4727 3 жыл бұрын

Also is there any way we can change the way it appears with a cross mark

@BIElite 3 жыл бұрын

Not that I know of... I was thinking of ways to get around this. I'll let you know if I find something.

@indhumathi4727 3 жыл бұрын

@@BIElite great.. If some feature to control this, then roles will be much effective. Users always want control of images, pages through roles..

@Baldur1005 3 жыл бұрын

Well, that’s why it is not great when report making. Maybe if there is DAX function which can read the viewing user role (something like USERNAME()) then some buttons would do the trick. Maybe in future MS will implement option where won’t be full removal of object but values in that object will be shown as blanks instead. Now the biggest benefit are build permissions and composite models

@v.s.5460 2 жыл бұрын

What if I need the users to be able to see the visual except for one specific measure which is part of it? Also, can this error message be customized? If users see this message they won't know their access is restricted, it looks like there is something wrong with the report and they will probably start sending tickets.

@batava 3 жыл бұрын

Is it possible to combine RLS with OLS? Say I want a user to not be able to see the cost information for a certain product? Or hide information from accounts containing text decription of wages?

@leniorrb 3 жыл бұрын

Very nice content! I was looking into this for a long time and couldn't find a solution. In the example, you used a RLS rule specific to hide the Unit Price for all users assigned to that. Do you tried combine the object level security with an expression level security?

@helloranjan89 Жыл бұрын

Looks ugly when that visuals break. Anyway to solve it on report level ?

@mirrrvelll5164 2 жыл бұрын

Great video!! I was into this topic since yesterday, did report but we are not sure how to protect them, I mean, tables/columns and so on. This was great how you explained, so that means after I am done with "tabular editor" and defining who can see what, then in RLS defined users wont see anyways those parts, but if I have more users? Can be applied for all of them at once or I need to go to tabular editor and check anytime? Second thing, what if I got table as a visual, and there my columns with numbers that other cant see, it will give this viz error on all the table but not only on one-two measures that I wanna? IF you understand what I say, if you got an error in table viz then whole viz is in error but not the column.... any workaround for that?? Thanks

@bi3026 3 жыл бұрын

What is difference between rls n ols?

@RafaMaculewicz 3 жыл бұрын

This is bananas!!! Thanks!

@jrazafindrabe5229 3 жыл бұрын

Hi Parker, Would you create a Video about "Row Level Security" (and probably with Tabular Editor). Thanks.

@indhumathi4727 3 жыл бұрын

We have this feature in ssas as well

@BIElite 3 жыл бұрын

Very true Indhu

@bandaralqahtani4356 2 жыл бұрын

Amazing new subscriber :)

@BIElite 2 жыл бұрын

Nice, welcome Bandar!

@pietjehans206 2 жыл бұрын

Pretty useless if it breaks visuals. In RLS I just let them return blanks so this preven the report from breaking. Only downside is that PBI doesnt support dynamic measure display names, so it will still show the name of the measure, but returns all blanks.

@bagpipe2411 2 жыл бұрын

Hi. Could you explain how you let them return blanks using RLS?

@pietjehans206 2 жыл бұрын

@@bagpipe2411 pretty easy but hard to explain in a comment. Just make a table with 2 options. In your RLS force a role to 1 of the options, then create a measure with IF statement with SELECTEDVALUE. If it doesnt meet requirement it will return blank

@bagpipe2411 2 жыл бұрын

@@pietjehans206 could you expand a bit more on the IF statement and selectedvalue thing? Also, I'd have to apply this to every visual right?

@pietjehans206 2 жыл бұрын

@@bagpipe2411 no, not for every visual, but that is also possible. Just type a measure like IF SELECTEDVALUE(newtabel[hide]) = forcedRLSselection, then x else blank

@bagpipe2411 2 жыл бұрын

@@pietjehans206 what exactly is "x" here? sorry, im pretty new to pbi :(

@jeyapauldavid5596 3 жыл бұрын

👍

@CJ-jc8tn 3 жыл бұрын

Hi Parker - Thank you for sharing information on Object Level Security. However, I cannot see myself implementing this any time soon given the user experience of seeing these error messages : kzfaq.info/get/bejne/hqeIaKqBnrnPhHU.html Is there a more graceful way of handling such errors from an OLS standpoint -- otherwise, I can just imagine all the requests coming in about a 'broken' dashboard :) Thanks

@shownormality 2 жыл бұрын

+1 here. I was really hopeful about this feature at first place, but the error tiles in reports are making it impossible to use right now. Shouldn't be very hard for Microsoft to handle it more elegantly from the UX persepective.

@denwo1982 2 жыл бұрын

Yes correct, I will not be able to use this, I was hoping that the object would still show but the value would replaced with BLANK or NULL. Microsoft have let themselves down again, not sure what they are doing there but their releases for power bi have been awful, the recent one export to excel “Data with current layout” just shows that. Bring back Bill Gates he needs to overlook the Power BI department.