Forum Discussion

scoder's avatar
scoder
Frequent Visitor
2 years ago

RLSs security implement to different level of access restriction

I have a few dashboards built to show sales, revenue, expenses, usage etc , I need to build an access control for these dashboards 

High-level requirement access is

  1. There is a global head for each product, they should be able to access details across all regions and locations for the product they are head of. For example, the Global head for TV, can access TV sales across all regions and locations  
  2. Similarly, there will be a region head for each product, they should be able to access details across all locations in that region.  
  3. There will be a location co-head for each product, they can access details of that particular location for the product he/she is head of. 

And below is the sample table of product, region and location. 

ProductRegionLocation
TVAmericaTexas
TVAmericaNew York
TVEuropeGermany
TVEuropeItaly
TVGreater ChinaShandong
TVGreater ChinaZhejiang
TVJapanTokoyo
TVJapanKyoto
TVRest of AsiaIndia
TVRest of AsiaSingapore
MobileAmericaTexas
MobileAmericaNew York
MobileEuropeGermany
MobileEuropeItaly
MobileGreater ChinaShandong
MobileGreater ChinaZhejiang
MobileJapanTokoyo
MobileJapanKyoto
MobileRest of AsiaIndia
MobileRest of AsiaSingapore

 

So I am planning to design the roles as below 

  •   Roles for each product to be assigned to Global product heads 
  •   Roles for each product and region combination, are to be assigned to region heads 
  •   Roles for each product and location combination, to assign to location co-head 

But these would end up creating too many roles and also will have operation maintenance issues when a new product is added. 

 

is there a simple way in power-bi space to build ACL for these kinds of requirements?