Forum Discussion

BL_consultant's avatar
BL_consultant
Frequent Visitor
3 years ago

Row level security, get AD attribute dynamically

Hi,

I have the following issue related to RLS. Is there any similar way to dynamically call e.g. AD attribute of signed user as I would use regular USEPRINCIPALNAME() in RLS role? How can I utilize the user's AD attributes dynamically after she/he has signed in to Power BI service?

 

I need to filter data using a location information. For a user who sings in to Power BI service, has this location information as an attribute in AD. I need to filter student data based on signed teacher (user) and I need to make sure that the teacher sees only her/his students data. 

 

However, I cannot import any AD related data to Power BI dataset and I cannot use AD connector to make a direct query based on the signed user.

DAX
RLS

1 Reply

  • lbendlin's avatar
    lbendlin
    Super User
    3 years ago

    In my experience the AD connector is excruciatingly slow. You may want to ask your AD people if they provide regular (eg daily) extracts in easy to consume format,  and use that extract instead for your RLS.