Role Level Security

Hello Phantom1980,

Hope you're doing well!

Try this solution step by step:

• Create a Security Mapping Table

Create a static table (in Power Query or a manual entry) called RLS_Mapping:

Viewer - CanSee

A - A

A - B

A - C

B - B

C - A

C - B

C - C

• Create the RLS Role in Power BI Desktop

Go to Modeling → Manage Roles → Create Role (e.g., StatsRole).

Apply this DAX filter on your Stats table:

[Name] IN

    SELECTCOLUMNS(

        FILTER(

            RLS_Mapping,

            RLS_Mapping[Viewer] = USERPRINCIPALNAME()

        ),

        "CanSee", RLS_Mapping[CanSee]

    )

If you're using Name values like "A", "B", "C" in the Stats table, this works directly. If you're using full names/emails, align the CanSee column values accordingly.

• Assign Users to the Role in Power BI Service

After publishing, go to Dataset → Security and add users A, B, and C all under the same StatsRole.

Remember that you should make sure the Viewer column in RLS_Mapping contains the users' exact UPNs (e.g., [email protected]), not display names.

Hope this helps! Don't forget to accept as solution ✅ and give kudos 👍 in order to keep helping others.

Best regards,

Oussama (Data Consultant - Expert Fabric & Power BI)

Hi Phantom1980,

May I check if this issue has been resolved? If not, Please feel free to contact us if you have any further questions. Your update will be valuable to the community and may assist others with similar concerns.

Thank you.

Hi Phantom1980,
 

Thank you for posting your query in the Microsoft Fabric Community Forum, and thanks to the cengizhanarslan  and  grazitti_sapna  for sharing valuable insights.
 

Could you please confirm if your issue has been resolved using the suggested approach? This will help other community members facing similar scenarios.
 

Thank you.

You need a mapping table that defines which user can see which names. This gives you full flexibility without creating a separate role for every user.

1) Create a new table in Power Query (or as an Excel/CSV source) called RLS_Mapping with two columns: UserEmail and AllowedName.

2) Create a relationship from RLS_Mapping[AllowedName] to your stats table's Name column (many-to-one, single direction from RLS_Mapping to stats table).

3) In Power BI Desktop, go to Modeling → Manage roles → New role. Name it something like "DataAccess". On the RLS_Mapping table, add this DAX filter:

[UserEmail] = USERPRINCIPALNAME ()

4) Publish to the Power BI Service. Go to the semantic model → Security → assign all users to the "DataAccess" role.