Updating/ Changing the 'owner' information column in a dataverse table

[Jegaveer]

Hello All,

I have a table in dataverse and I am wondering how to modify  the 'owner' column (has more than 50,000 records) of the table .I am trying to implement to row level security for the below table and would like to test it.

I would like the instructor to see only the subjects (Class Name) which they handle. The assumption which I have is that, if I update the specific instructor's name as owner and grant them read access, they could see the records which they own. But I am not sure how to achieve this if we have more records in the owner column. Also, if I create 'team' and add all the instructors, would they still be able to see their own class name.

Sample table:

Class Name	Instructor	Owner
Biology	Jack	Sys Admin
Maths	John	Sys Admin
Biology	Jack	Sys Admin
History	Adam	Sys Admin
Geography	Paul	Sys Admin
History	Adam	Sys Admin

Thank you so much in advance! Really appreciate your comments.

[ChrisPiasecki · Accepted solution]

Hi @Jegaveer,

If you want instructors to only see the Class records they own, then you should set the owner to the instructor for each Class record they are responsible for. Create a security role that has owner/team level privileges to the Class table, then assign that security role to your instructors.

---
Please click Accept as Solution if my post answered your question. This will help others find solutions to similar questions. If you like my post and/or find it helpful, please consider giving it a Thumbs Up.

[dpoggemann · Accepted solution]

Hi @Jegaveer ,

In your list above you have the same class mentioned multiple times with the same instructor listed.  I assume you have situations where you have multiple instructors that can teach the same class (Biology) or similar.

I would create a model similar to the following to allow for multiple instructors to teach classes and to track additional metadata on the classes as well.  The User entity would be utilized for your instructors so you wouldn't actually have a different column on the Instructor Class table for the Instructor but utilize the Owner column to set the ownership to them this way.

The security role, as mentioned by @ChrisPiasecki could. be used to only show the Instructor Class records they would own (User level on the role) and this could have a Quick View into the Class information on that form or just allow the instructor to see any Class as well as they would have secure access to only their Instructor Class records.

[Jegaveer]

Hi @ChrisPiasecki , thank you so much!

[Jegaveer]

Hi @dpoggemann , 

Yes, that worked! thank you so much for sharing your feedback.

[Jegaveer]

Thank you so much for your help! Really appreciate your feedbacks. I was able to implement security role (basic role + read only privilege) for a dataverse table and used power bi to build a report on that. when I publish the report in to workspace the security role (implemented in dataverse) doesn't apply there. Any thoughts on how to make that happen (make the security role in dataverse in reflecting in power bi work space) other than implementing row level security in power bi report. Appreciate your comments, thank you so much!

[dpoggemann]

Hi @Jegaveer ,

Dataverse now supports Direct Query and this enforces the Dataverse security model since the data is returned real time.  See the following article:  https://docs.microsoft.com/en-us/power-apps/maker/data-platform/data-platform-powerbi-connector 

Hopefully this will do what you need...

[dpoggemann]

Hi @Jegaveer ,

Dataverse now supports Direct Query and this enforces the Dataverse security model since the data is returned real time.  See the following article:  https://docs.microsoft.com/en-us/power-apps/maker/data-platform/data-platform-powerbi-connector 

Hopefully this will do what you need...

[Jegaveer]

Hi @dpoggemann,

Thank you so much for sharing that information. I am able to create a report in power bi desktop and the security role features apply there. But the challenge is, when I publish the report to workspace or app, any member in the workspace is able to see all the information in the report/ app (the security role/ field restrictions is not working there) .
Let's say, a person who doesn't have enough privilege's in security group (dataverse) but a member in power bi workspace is able to see all the data in the report or download the pbix of the dataset.

I am trying to understand the behavior of security role on this. Your feedback will be really appreciated, thank you so much for your help!

Thanks!

Jega

[dpoggemann]

Hi @Jegaveer ,

Are you utilizing the DirectQuery here or refresh on schedule?  The refresh will need to utilize the row level security but I thought the Direct Query utilized Dataverse security.  Let me know if this is not working and I can work with my Power BI expert tomorrow.