Forum Discussion
Helper IIRLS Best Practice
Good afternoon,
I am asking for an advice on what is the best approch concerning the RLS for a multi "Branch" scenario.
Scenario:
I have a model where there is a fact table and then there are other tables related to the fact tables with the Dimension.
I have to set up a role where some users can see only some information of the fact table and the related dimension.
In particular we have different Branches and one user must see only some information of the fact table and "some information" of the dimensions. The branch field is present in all the tables and used for creating the keys used among the tables.
Is it the best approach to create a role for each Branch?
Is it the best approach create a table where the users are linked to the relative Branch and use this table to filter the roles?
Hi thebigwhite ,
Try to create a model like this.
Then create a role on the 'Branch table'.
Best regards,
Lionel ChenIf this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
2 Replies
v-lionel-msftCommunity Support
Hi thebigwhite ,
Try to create a model like this.
Then create a role on the 'Branch table'.
Best regards,
Lionel ChenIf this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
- lbendlin
Super User
It's not just the creation of the roles that you need to think about. You also need to think about the rules for each role, and to which table(s) to apply these rules.
Ideally you have an RLS reference table that sits at the top of the hierarchy (outermost shell of star/snowflake). In that case you may be able to apply the rules just to this one table, and then the data model can do the rest of the work.
Worst case you have to apply the rules to every single table. Not cool.
