Row level security with multiple roles

Question

Hi,&nbsp;I have a report built and pushed on to power bi service. When i am embeding the report using Azure AD, i want to get a report filtered with the clientid and locationid which can be dynamic value.Currently, i am getting the report which filtered with client id where i am using row level security role as 'Dispensary' and filter as clientid=USERNAME() on mange roles. Since, where i use to&nbsp;generate token on webapplication by passing username as client id and roles as ["Dispensary"]&nbsp;but , now i have another condition comes in where i have to get a report based on codition that is locationid and clientid .&nbsp;&nbsp;&nbsp;How can i achieve this?&nbsp;Thanks in advance.Pallavi K

v-jiascu-msft · Answer

Hi&nbsp;Pallavi,
&nbsp;
It seems your embedded mode is "App Owns Data". Please refer to&nbsp;developer/embedded-row-level-security.
1. I would suggest you create two roles based on locationid and clientid. One role is also good if the two fields can be combined.
{
    "accessLevel": "View",
    "identities": [
        {
            "username": "EffectiveIdentity",
            "roles": [ "Role1", "Role2" ],
            "datasets": [ "fe0a1aeb-f6a4-4b27-a2d3-b5df3bb28bdc" ]
        }
    ]
}
2. If not for the sake of security, I would suggest you use slicers to make the two fields dynamic.&nbsp;
&nbsp;
Best Regards,
Dale

pallavikgvg · Answer

Thank you&nbsp;v-jiascu-msft.&nbsp;Currently, for generatingtoken with single role i am passing the post request body as&nbsp;$clientid = "2";{"accessLevel": "View","identities": [{"username": $clientid&nbsp;,"roles": [ "Client" ],"datasets": [ "9b61d620-e6ac-41fc-b2c9-3f1d89241a03" ]}]}&nbsp;Another field that comes in now is&nbsp;$location = "3";//Can be multiple location under client&nbsp;Note: I may have multiple location under single client [under client 2 i may have location id 2,3,4 etc] and i have 2 different table called Clients and Locations.&nbsp;&nbsp;In Bi desktop i have Client role created as client_id = USERNAME(); (I have duplicated client id column as string)How i can pass the location for username property of identities, where it takes single value?What can be done at the power bi desktop to create the roles for both clients and locations ?&nbsp;&nbsp;Thanks and regardsPallavi

v-jiascu-msft · Answer

Hi&nbsp;Pallavi,
&nbsp;
We can set many rules for one role at the same time. So we can only create one role for your scenario. Please refer to the snapshot below.

&nbsp;
Best Regards,
Dale

v-jiascu-msft · Answer

Hi&nbsp;PallaviKGVG,
&nbsp;
Could you please mark the proper answer as a solution?
&nbsp;
Best Regards,Dale

pallavikgvg · Answer

Hi&nbsp;v-jiascu-msft,&nbsp;The issue is no yet solved.I need to get a report as such where client_id = 2 and location_id =1&nbsp; (Single client may have different locations). When i want to&nbsp;render a report , where the location_id is only 1.&nbsp;&nbsp;reffer image for the relationship.&nbsp;&nbsp;So, How i can achive that?The client and locationid can be dynamic. As 'username' in identities takes only single value where can i pass location_id like just 1?. How my role level security created at the desktop?&nbsp;In the above solution, when i create the role as such, i wil get a report for that particular client and all locations under that client. But, in this case i need a single location that is under client, i mean to say that location id and client id is send to the api at the time of embedding in the webapplication.&nbsp;something like this ?&nbsp;$clientid = "2";{"accessLevel": "View","identities": [{"username":&nbsp;$clientid&nbsp;,$location_id"roles": [ "Client","Location" ],"datasets": [ "9b61d620-e6ac-41fc-b2c9-3f1d89241a03" ]}]}&nbsp;&nbsp;If their is something to solve this issue is very helpfull.&nbsp;Thank youPallavi

Forum Discussion

Row level security with multiple roles

10 Replies

Related content

Role Level Security

Page level security

Dynamic Row level security

Row level Security multiple columns Dynamic

page level security