Object-Level Security in Power BI

[@denwo1982]

Hi, I still want the visualisations to work but the column that we want to hide can it not be set to BLANK or NULL ? Users will think the report is broken when they see the visualisation error? Not what we wanted when this was asked on the ideas section

[@927dice]

Awesome as usual Parker! Great complete run down of OLS

[@tejasbrahmbatt5344]

Is it possible to give a better message to users who don't have access to Unit Price. The cross (x) makes business users feel something is broken. A good Message like - "data for sales team hidden" etc would be beneficial..

[@BIElite]

Agreed! I'll post a follow-up video if I can figure something out.

[@DanielWeikert]

Thanks for sharing. Any idea whether there is an option to handle the visual errors? From a user friendly perspective if someone has no access rights it should display a message for that instead of the default visual break "something went wrong"

[@BIElite]

Hey Daniel, that's the million dollar question. I'll post something if I can figure something out!

[@rayemeric6532]

@@BIElite thanks for this great video. Is there any news regarding the visual errors? thanks!

[@mdhidayat5706]

Cool OLS! Just wondering if can display the visual something like "Restricted Data" instead of "something's wrong with one or more fields".

[@BIElite]

Thanks Md! I agree, and I'll try to think of a way to do what you're saying.

[@totvabe1]

@@BIElite It would be interesting in terms of quality of visualizations. It's kind of shabby show the errors … .👍

[@ionpt]

I have tried to instantiate as table() in m query but still not working. I will keep trying also. Let me know if you find how to deal with the visual error

[@officesuperhero9611]

I think all Power BI users have waited for this for years. Thanks! But why is there a download? Is this additional add-on a Microsoft product? Argghh. Microsoft always makes things so complex.

[@BIElite]

Hey Richard, I agree with you. Though Tabular Editor is GREAT, it's still a 3rd-party tool. It seems like Microsoft is going to rely heavily on 3rd-party tools to pick up some of the slack. Hopefully these functionalities (OLS, calculation groups, etc.) move into Power BI Desktop at some point in the future.

[@pavel5362]

Is it possible to hide specific pages for different roles?

[@BIElite]

Not out of the box, but you can set up navigation buttons with conditional logic. It’s not a 100% solution, because people can still navigate to certain pages if they know the exact URL. But couple that with OLS and it won’t matter that much 😊

[@shodhan]

Is it possible to set up that only certain user can access data and all others can not? I want the default to be no access for all and certain specific users can see it

[@AntRogers]

Do you know if it’s possible to set the default value to none? I’d like the default to be that any new table I add to the data model is not accessible unless I proactively expose it.

[@MarziehKianiani]

I really appreciate you as it's helpful for me!

[@roberttyler2861]

Up until now its just been a similar piece but by using RLS. I guess this makes it slightly easier. unless I'm missing something?

[@batava]

Is it possible to combine RLS with OLS? Say I want a user to not be able to see the cost information for a certain product? Or hide information from accounts containing text decription of wages?

[@mirrrvelll5164]

Great video!! I was into this topic since yesterday, did report but we are not sure how to protect them, I mean, tables/columns and so on. This was great how you explained, so that means after I am done with "tabular editor" and defining who can see what, then in RLS defined users wont see anyways those parts, but if I have more users? Can be applied for all of them at once or I need to go to tabular editor and check anytime? Second thing, what if I got table as a visual, and there my columns with numbers that other cant see, it will give this viz error on all the table but not only on one-two measures that I wanna? IF you understand what I say, if you got an error in table viz then whole viz is in error but not the column.... any workaround for that?? Thanks

[@v.s.5460]

What if I need the users to be able to see the visual except for one specific measure which is part of it? Also, can this error message be customized? If users see this message they won't know their access is restricted, it looks like there is something wrong with the report and they will probably start sending tickets.

[@indhumathi4727]

Also is there any way we can change the way it appears with a cross mark

[@BIElite]

Not that I know of... I was thinking of ways to get around this. I'll let you know if I find something.

[@indhumathi4727]

@@BIElite great.. If some feature to control this, then roles will be much effective. Users always want control of images, pages through roles..

[@Baldur1005]

Well, that’s why it is not great when report making. Maybe if there is DAX function which can read the viewing user role (something like USERNAME()) then some buttons would do the trick. Maybe in future MS will implement option where won’t be full removal of object but values in that object will be shown as blanks instead. Now the biggest benefit are build permissions and composite models

[@jrazafindrabe5229]

Hi Parker, Would you create a Video about "Row Level Security" (and probably with Tabular Editor). Thanks.

[@TitansLacrosse34]

This is so helpful, thank you!

[@BIElite]

Great to hear!

[@Mahshadn]

Great content! Thanks! It would be great if you make more content about security in PBI and sharing/presentation of dashboards to others.

[@BIElite]

Hi Mahshad, thanks for the suggestions! I'll think about creating more content around security and presenting in the future.

[@bravucod]

Exactly what I needed. Thanks !

[@BIElite]

Glad to hear!

[@bi3026]

What is difference between rls n ols?

[@leniorrb]

Very nice content! I was looking into this for a long time and couldn't find a solution. In the example, you used a RLS rule specific to hide the Unit Price for all users assigned to that. Do you tried combine the object level security with an expression level security?

[@helloranjan89]

Looks ugly when that visuals break. Anyway to solve it on report level ?

[@gkirankumarskht]

Awesome ., it's really useful. Thank you

[@indhumathi4727]

We have this feature in ssas as well

[@BIElite]

Very true Indhu

[@SandipanSarkar-c8v]

Finished watching

[@RafaMaculewicz]

This is bananas!!! Thanks!

[@bandaralqahtani4356]

Amazing new subscriber :)

[@BIElite]

Nice, welcome Bandar!

[@pietjehans206]

Pretty useless if it breaks visuals. In RLS I just let them return blanks so this preven the report from breaking. Only downside is that PBI doesnt support dynamic measure display names, so it will still show the name of the measure, but returns all blanks.

[@bagpipe2411]

Hi. Could you explain how you let them return blanks using RLS?

[@pietjehans206]

@@bagpipe2411 pretty easy but hard to explain in a comment. Just make a table with 2 options. In your RLS force a role to 1 of the options, then create a measure with IF statement with SELECTEDVALUE. If it doesnt meet requirement it will return blank

[@bagpipe2411]

@@pietjehans206 could you expand a bit more on the IF statement and selectedvalue thing? Also, I'd have to apply this to every visual right?

[@pietjehans206]

@@bagpipe2411 no, not for every visual, but that is also possible. Just type a measure like IF SELECTEDVALUE(newtabel[hide]) = forcedRLSselection, then x else blank

[@bagpipe2411]

@@pietjehans206 what exactly is "x" here? sorry, im pretty new to pbi :(

[@CJ-jc8tn]

Hi Parker - Thank you for sharing information on Object Level Security. However, I cannot see myself implementing this any time soon given the user experience of seeing these error messages : kzbin.info/www/bejne/hnK7ZnqGbrieiqM Is there a more graceful way of handling such errors from an OLS standpoint -- otherwise, I can just imagine all the requests coming in about a 'broken' dashboard :) Thanks

[@shownormality]

+1 here. I was really hopeful about this feature at first place, but the error tiles in reports are making it impossible to use right now. Shouldn't be very hard for Microsoft to handle it more elegantly from the UX persepective.

[@denwo1982]

Yes correct, I will not be able to use this, I was hoping that the object would still show but the value would replaced with BLANK or NULL. Microsoft have let themselves down again, not sure what they are doing there but their releases for power bi have been awful, the recent one export to excel “Data with current layout” just shows that. Bring back Bill Gates he needs to overlook the Power BI department.

[@jeyapauldavid5596]

👍

[@Alex-uh5qv]

Useless, users will think the report is broken when they see the visualisation error. You cant publish something with errors...

[@SandipanSarkar-c8v]

Finished watching