Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
4 years ago
Solved

RLS

Hi,

I have a Power BI report with P&L data at the customer, country and region level. I received a request to

- restrict sales managers' access based on customer, country and region. For example; when sales manager X opens the report, he should only see customer Y data in Europe

- business leaders need to be able to see the whole unfiltered report

 

I am not sure how to go about setting this up. Any help is greatly appreciated.

 

Thank you

  • Anonymous , What I usually do is I get email and list off access of county in one table and email and list of customer and configure RLS on both using userprincipalname

     

    Business leader should have access to all locations/country 

  • Hi, Anonymous 

    Has the user been assigned a role other than "Viewer" in the workspace? RLS cannot take effect on roles (admins, members, contributors) that have access to dataset.

    Best Regards,
    Community Support Team _ Eason

     

4 Replies

  • Anonymous , What I usually do is I get email and list off access of county in one table and email and list of customer and configure RLS on both using userprincipalname

     

    Business leader should have access to all locations/country 

    • Anonymous's avatar
      Anonymous
      Not applicable

      amitchandak Country level RLS is no longer required. It's only region and customer. I setup two different tables as you mentioned connected to the respective main tables in the report with cross filter direction "both" and two way security enabled.

      Table 1 - User email and region (connected to the main region table in the report) 

      Table 2 - User email and customer (connected to the main customer table)

       

      Under modelling, I created a role with filters on table 1 and table 2 -> User email = userprincipalname(). I then published the report and added users to the role under security in the dataset. However, the users are still able to see all the data. Please advise.

      • v-easonf-msft's avatar
        v-easonf-msft
        Community Support

        Hi, Anonymous 

        Has the user been assigned a role other than "Viewer" in the workspace? RLS cannot take effect on roles (admins, members, contributors) that have access to dataset.

        Best Regards,
        Community Support Team _ Eason