-MOD6-4b_2015-1080-Endoding
0 (0 Likes / 0 Dislikes)
[Will Thompson] One of the most important things
when you're working with data
is to make sure it's secure.
That can mean doing things like making
sure that certain users have got access
to certain sets of information, whereas other
users might see different information.
As an example, let's think about a
sales organization where
maybe some users can see sales
from all of the different countries or districts,
but perhaps a sales guy in a particular region
would only be able to see his sales
or sales in his states.
We're going to use that as an example here,
and we're going to walk through building
something called row level security
which is a very, very granular security you
can apply within Power BI
to control who has access to what data.
I'm going to start here in the Power BI desktop,
and I've already got a report built
showing sales from around the world.
So you can see on the map we've got sales
in the US, Canada, and France.
And this tree map in the bottom
right shows that revenue
broken out by particular states.
So you can see the US ones like
California or Texas,
and also states from other countries like
Isle De France in France.
And to start to apply security onto this,
up in the ribbon on the modeling tab,
you'll see a security area, and I can
choose to manage the roles
that are being applied here.
A role is something that you'll put users into,
so user has a particular role.
If I create one of these roles, you'll
see I'll be able to give it a name.
So this is going to be for our US sales folks,
and I can control the particular bits of data
that somebody has access to in this role
by applying a bunch of filters
onto each table in my model.
So, for example, given that we're
going to focus on the US,
I'm going to use our geography table.
This little dot, dot, dot button will help
me start building the filter that I need.
So I'm going to put a filter on
the country.
I can do this at any level.
But I'm going to use the country field from this table.
What I'm adding here is a DAX Expression.
So you'll see elsewhere in these videos
that we go into DAX in a lot of detail—
it's a very rich, expressive language
that allows you to create these calculations,
but also then apply filters to your data.
Something simple like just filtering
on a particular country is really easy.
All you do is type in the value
from this country field
that I want to filter on.
But I could do a whole range of other things,
and you can take a look at those other videos to see how you could use DAX to build those up.
So I'm going to have one for the US sales.
I can create another one maybe for Canada sales,
and for this one I am going to do the same thing.
But here use Canada.
I could have also copied that
filter from one of the other roles
that I've done, so if I had a slightly more
complex expression, but I wanted to apply it
to multiple roles, there is a nice easy way
of bringing that across from one to another.
So now I'm done with those roles.
I'm just going to save it.
Those roles have been applied
here to the power BI model,
but I haven't actually assigned
any users to those roles yet.
And I'm going to do that once I've
sent this report up to the Power BI service.
I've got that model and the reports
up in the servers here as well now.
And I've already created a dashboard
and just pinned a few
of the visuals across to here, and if
I click on these, it'll take me back
into the report as you'd expect.
You can see the data sets down
in the left hand side, the bottom left hand corner.
This is the one that I just created.
When I click the little dot, dot, dot menu,
I actually get a security option here.
And this shows me those role level security options and those roles that I had already created in the desktop.
So US sales and Canada sales.
And I could start adding email addresses
off folks in my organization
who I want to assign into these roles.
So I'll add them under into here,
save my changes,
and then in the Canada one I can add
somebody else to put in here.
Add him, save it.
So I can see now that I've got
one person in each of these roles,
and we'll stop over to Amanda's machine
so that we can see how that's affected her view.
As you can see, I've already previously
had access to this report.
But since I had it open before Will
added me to the role,
I can't see any of the data.
It's completely blocked from me because
I was not part of any of the roles for security.
Now, when I refresh the page, since
Will added me to the role,
I now see the data, but it's restricted only to the US.
So I can only see the US data in the map,
and on the line chart, and you can see all the states here,
but nothing outside the United States.
And when I click through to the report,
I also see the data restricted only to the US.
So with that, I don't see anything
related to any of the other security roles
that I may not actually have—
I would not want to be able to see.
So that's it, it's really easy then to
set up security so that certain users have got
access to certain sets of information
from within the Power BI desktop
and manage our users to those roles
up in the Power BI service.