REST API for managing roles of datasets
Row-level security enabled by roles for datasets feature released in March 2016. is great but a manual process. It should be enabled via Rest API too. That would allow synchronization of user roles with custom applications automatically.
Laura J commented
Any update on this feature request? Are you done discussing it internally, Jono Luk (Admin, Microsoft Power BI)?
Caio Proiete commented
Any update on this feature request? This is critical to enable continuous deployment of reports
I would really need this feature to generate the security constrains based on my ERP security structure
David Perez commented
Any status with this feature? Was the API modified to support managing roles?
I'm in the same boat as Eric. I need RLS setup for datasets created by the API. Is there an update on this?
Is there any update on this feature request?
I need to only allow access to data through RLS based on regions an admin user can dynamically add/delete/alter in our application. In order to do this I need to be able to create/delete new roles programmatically as our client's admin creates/deletes these regions.
Without this feature there isn't a workable solution that I can see
Florian Schäffler commented
Until the API has been extended for programmatically adding roles, there's the following workaround.
- create a stock of unused roles and users once within Power BI Desktop and publish those with the report
- in your application keep track of which role has been already used
- on a new sign-up to your application get one of the available role/user
- update the underlying data for existing and new entries to comply with the chosen role/user
Would love to see this feature.
Any news on potential progress now that RLS is looking stable as a feature?
John Friesen commented
I would also really like this functionality. I agree with the last comment it is prone to mistakes. I have to open my pbix file and add the roles and then i have to reload my BPIX file (i use the API to do this and it's awesome). but if I had this functionality I wouldn't have to interact with the file ever again after the inial creation of the reports.
Are there any updates?
GUI is an easy way, but it is prone to mistakes. Users/Groups should be able to assigned by APIs, PowerShell, etc. This is a required feature, especially if there are a lot of users.
Thanks for the feedback. We're discussing this internally and once we have an update we'll circle back. We definitely wanted to start by making sure that we got the feature rock solid and then we'll move into providing other ways of managing/configuring this!