RLSs security implement to different level of access restriction

scoder — Sun, 29 Oct 2023 16:45:04 GMT

I have a few dashboards built to show sales, revenue, expenses, usage etc , I need to build an access control for these dashboards

High-level requirement access is

There is a global head for each product, they should be able to access details across all regions and locations for the product they are head of. For example, the Global head for TV, can access TV sales across all regions and locations
Similarly, there will be a region head for each product, they should be able to access details across all locations in that region.
There will be a location co-head for each product, they can access details of that particular location for the product he/she is head of.

And below is the sample table of product, region and location.

So I am planning to design the roles as below

Roles for each product to be assigned to Global product heads
Roles for each product and region combination, are to be assigned to region heads
Roles for each product and location combination, to assign to location co-head

But these would end up creating too many roles and also will have operation maintenance issues when a new product is added.

is there a simple way in power-bi space to build ACL for these kinds of requirements?

Re: RLSs security implement to different level of access restriction

Anonymous — Mon, 30 Oct 2023 01:13:48 GMT

You should be able to achieve this using PATH and USERPRINCIPALNAME functions. See RADACAD article here for more details Dynamic Row Level Security with Organizational Hierarchy Power BI - RADACAD