Where's the best place to enable RBAC to the FOCUS data?

[bhirani-kainos]

Hi,

I have a requirement to limit visibility of the FOCUS data so that people only see data in Power BI relating to the subscriptions and shared costs that they are stakeholder of.

For example, using the Azure FOCUS data, a project team is provided with a pair (prod and non-prod) of Azure Subscriptions for their resources. I want to enable the team to use the Power BI template reports to see their subscriptions using Entra ID groups to manage the access rights. The project teams should also have access to report on the subscriptions that run shared services for which costs will be recharged to the project team on a pre-agreed allocation basis.

Where should the RBAC be applied to enable this functionality? Some options I've considered:

1. Use Data Explorer to split up the data into per subscriptions tables
2. Use DAX in Power BI
3. Configure in Fabric??
4. Power Platform / ADF / something else

Thanks!

[flanakin]

I don't have experience with this, so can't provide a precise answer, but here are my initial thoughts:

• If Power BI is using the end users' credentials to access the data, use row-level security in Data Explorer.
• If Power BI is using a single account for all end users, then use row-level security in Power BI.

[bhirani-kainos]

Thanks. I came to the same conclusion and will be applying RLS in Power BI.