Dataverse - Power BI Display Options

[JohnMarkPerez]

Hello guys.

My organization recently utilize dataverse as a data source. We have created security roles and profiles, field security. We are happy with the "back end".

However the "front end" on Power BI, where user chooses the dataverse table is where the problem is. User are able to see all of the dataverse table even if they have not permission to load the data.

We want to remove all the standard tables and tables user do not have permission from the display option. IS THIS POSSIBLE, HOW?

[dpoggemann]

Hi @JohnMarkPerez ,

You will need to build row level security in the Power BI report to control access to the data in the backend Dataverse.  The normal connector to Dataverse through Power BI utilizes a single connection which will have all rights, not specific to the user.  If you do want to enforce the Dataverse security then you can utilize the DirectQuery approach as mentioned here:  https://docs.microsoft.com/en-us/power-apps/maker/data-platform/data-platform-powerbi-connector?tabs... 

[JohnMarkPerez]

Hello dpog
We already have table, column and raw security in place. My problem is that a user can see all tables in Power BI even if they only have access to 4 tables. I want my user to only see the 4 tables they have access to, when they get data from dataverse.

[dpoggemann]

Hi @JohnMarkPerez ,

Is this when actually building the reports or displaying the reports?  In the "build" side from Power BI Desktop, the user will only be able to view records from the tables they have security for in Dataverse if the connection they are using is their own credentials.  They will still see all tables in the list that I know of...  

On the Power BI report side, you need to control access to the records based on the row level security as discussed or even create different reports for different users with specific tables in each report. 

You might want to post in the Power BI user group and see if they have any additional thoughts.

[Sancal1]

By any chance did you manage to have a solution to this. I am have the exact same issue and want to hide the default tables from my users.

[Sancal1]

In my case this is when using Power Bi Desktop and pressing on the Dataverse button. When the user select the environment all default tables are being displaced instead of the ones he actually have access to.

[ivan_apps]

You should change your data retrieval definition from "Import Mode" to "Direct Query" - direct query should query the system using the user's credentials when they open the report.  It does take longer to load, but should give you what you need.

[donalmc]

You won't be able to hide the existence of tables that users don't have access to, but users will not be able to retrieve any records from the tables if they don't have a Dataverse security roles that gives them access.

One other major PBI and Dataverse gotcha to be aware of is that the published report uses the security of the logged in user. Any report user with less security gets to see the items that the security role of the person who published the report allows.

You can try using RLS to get around this but it will not map to Dataverse security.