简体   繁体   English

Power BI,其余源,身份验证和访问权限(用户)

[英]Power BI , rest source , authentication and access (users)

I am fairly new to Power BI. 我是Power BI的新手。 I have two questions/clarifications: 我有两个问题/说明:

Question 1: 问题1:

I was wondering What type authentication is supported by Power BI datasets. 我想知道Power BI数据集支持什么类型的身份验证。 I will explain with an example below: 我将在下面的示例中进行说明:

Consider I have a Power BI dataset and some charts (a dashboard) in Power BI. 考虑一下我在Power BI中有一个Power BI数据集和一些图表(仪表板)。 The datasource is Rest WCF service on my premises. 数据源是我处所的Rest WCF服务。 The users are my organizational users. 用户是我的组织用户。 The OData service is an HTTPS endpoint. OData服务是HTTPS端点。 I was wondering if authentication would work in that case? 我想知道在这种情况下身份验证是否可以工作? Would I be able to authenticate the user in this case. 在这种情况下,我可以对用户进行身份验证。 As my knowledge goes if the call to my rest service has a token in header, I would be able to call my STS and validate the user. 据我所知,如果对我的休息服务的调用的标头中包含令牌,我将能够调用STS并验证用户。

My question is when the dataset is refreshed, the call to my service (which is made from Power BI) does it also include a Token in the call header. 我的问题是刷新数据集时,对我的服务的调用(由Power BI进行)是否在调用标头中也包含Token。 I am assuming it would be because the user is already logged on to power BI using his/her organizational credentials. 我认为这是因为用户已经使用他/她的组织凭据登录到Power BI。 Can someone please confirm. 有人可以确认。

Question 2: 问题2:

This question is again about user access/authentication. 这个问题还是关于用户访问/身份验证的。 Consider that my organization has many users which have different level of access to data (some users would see more data/ some less based on user id). 考虑到我的组织有许多用户,这些用户对数据的访问级别不同(某些用户根据用户ID可以看到更多的数据,而有些则更少。 I develop some power BI datasets (models) and some dashboards. 我开发了一些Power BI数据集(模型)和一些仪表板。 I as developer have access to all data, so essentially see all data. 我作为开发人员可以访问所有数据,因此本质上可以查看所有数据。 I then share them to end users. 然后,我将它们分享给最终用户。

The question is when any user uses the shared dashboards and refreshes the dataset, will his access (authentication) work and he sees only those data that he should ? 问题是,当任何用户使用共享的仪表板并刷新数据集时,他的访问(身份验证)是否可以正常工作,并且仅看到他应该查看的数据?

I am confused as to how this would work. 我对这将如何工作感到困惑。 Is it that when an user adds a shared dashboard into his profile, would he/she have his own copy of the dashboard/dataset or will it be an shared one. 是当用户将共享的仪表板添加到其个人资料时,他/她将拥有自己的仪表板/数据集副本还是将其共享。 If it is a shared one then I guess the access thing would not work. 如果是共享的,那么我想访问将无法进行。

Please advise/suggest. 请告知/建议。

  • Girija 吉里雅

First question: if your data sources uses basic authentication it should work. 第一个问题:如果您的数据源使用基本身份验证,它应该可以工作。 You would build your Excel file or Power BI Desktop file to point to your data source, ensure it refreshes and then publish to the Power BI service. 您将构建Excel文件或Power BI Desktop文件以指向您的数据源,确保其刷新后再发布到Power BI服务。 If you're looking for OAuth, then that is not something you can do on your side yet. 如果您正在寻找OAuth,那您还不能这样做。

Second question: depends on how you implement your solution. 第二个问题:取决于您如何实施解决方案。 If you're using the a REST API, the data is retrieved as the user who entered their credentials. 如果您使用的是REST API,则会以输入其凭据的用户身份来检索数据。 So if you share your report built on your data source, then the people you share with see your data. 因此,如果您共享基于数据源的报表,那么与您共享的人员就会看到您的数据。 However, if you use something like Analysis Service tabular as the data source, you can implement row level security in Analysis Service tabular, your users would instead login as themselves and see just the data they have permission to. 但是,如果使用诸如Analysis Service表格之类的数据作为数据源,则可以在Analysis Service表格中实现行级安全性,您的用户将改为自己登录并仅查看他们有权访问的数据。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM