topic RLS vs Filter for current user in Developer

RLS vs Filter for current user

jdbusselman — Wed, 27 Dec 2017 15:48:25 GMT

Environment: SQL 2016, using Tabular models, Power BI, live connection with Tabular Models

I see a lot of people asking about filtering to "Current User", this is a simple and easy thing to do within SSRS as a hidden parameter that is filtered into the data query. However, pretty much all of the answers are to do Row Level Security. There is a very different need between filtering to current user and securing the data.

Problem: Same as a lot of people I want to create a dashboard/report where it auto filters to the current user, or at least defaults the filter to the current user.

Requirement: When a user opens the Power BI dashboard/report it should filter to their stuff. Single dashboard as this is a corporate dashboard so if things are modified it's done one time and everyone has the same view of their information.

I have a working version of Row Level Security on one of our Tabular Models, however this doesn't actually solve my problem. I don't actually want to secure the data and only let the current user see their stuff. If I were to implement RLS, then I would need 2 Tabular models on the same data, one to filter for current user and another to let them see everything if they want. That's not a viable solution. I found a work-around for date filtering to be current day/month/yr etc, but cannot find anything to do something similar with the current user. I have used the USERNAME() for the RLS, however that cannot be used in a table column within the tabular model.

I'm not sure if having the USERNAME() function work dynamically at query time is on the roadmap of improvements or if anyone has found any other solution to get the report/dashboard to filter or default to the current user.

Re: RLS vs Filter for current user

v-chuncz-msft — Thu, 28 Dec 2017 08:48:36 GMT

@jdbusselman,

As far as I know, there is no elegant way. You may leave a comment and vote this idea up.

Re: RLS vs Filter for current user

Sokon — Wed, 22 Aug 2018 12:16:35 GMT

@jdbusselman: I found this post while looking for a solution to the very same problem. I couldn't find a solution elsewhere so I tried myself and I think I found a usable workaround to achieve the desired result without having to use RLS.

Create a table to use as a filter later on: "Filter Table" with one column, two values: "yes" and "no". I did it with M:

let
    Source = Table.FromRows(Json.Document(Binary.Decompress(Binary.FromText("i45WikwtVorViVbyy1eKjQUA", BinaryEncoding.Base64), Compression.Deflate)), let _t = ((type text) meta [Serialized.Text = true]) in type table [Choice = _t]),
    #"Changed Type" = Table.TransformColumnTypes(Source,{{"Choice", type text}}),
    #"Renamed Columns" = Table.RenameColumns(#"Changed Type",{{"Choice", "Show only my stuff?"}})
in
    #"Renamed Columns"

Create a Measure that filters data using username():

# my stuff = CALCULATE(
    COUNTROWS('AllStuffTable');
    FILTER(
        ALL('AllStuffTable'[UserName]);
        'AllStuffTable'[UserName] = username()
)

Create a Measure that chooses the measure above when the value "yes" is selected in the "Filter Table", otherwise show unfiltered data:

# stuff = 
SWITCH (
    SELECTEDVALUE ( 'Filter Table'[Show only my stuff?] );
    "yes"; [# my stuff)];
    COUNTROWS ( 'AllStuffTable')
)

Create a data table with all desired fields an add the "# stuff" measure. By default, tables don't show rows where all measures are BLANK. We can use that, because for data that is not "my stuff" the measure "# stuff" will be BLANK and therefore excluded from the table.
When filtering the "Filter Table" to "yes" or "no" you will see a filtered result in the data table or not. You could put the filter in the filter pane or as a slicer on the canvas for user to switch to "their stuff" an back.

Does that make sense?

Re: RLS vs Filter for current user

DooDoo — Sun, 14 Oct 2018 15:53:59 GMT

@Sokon Do you have a pbi example to share as i do not succeed in implementing your solution ?

Thanks

Stephane

Re: RLS vs Filter for current user

miguelarce — Fri, 05 Jul 2019 16:21:11 GMT

Measure1
WhoIsWatching = USERPRINCIPALNAME()
(that is email style usernames, or you can use USERNAME() for windows style users)

Measure 2
FilterByViewer = IF(selectedvalue(table[email])=[WhoIsWatching],1,0)

Drag Measure 2 as a filter for visual, select advanced filtering and set it to
"Show items when value IS 1"

Re: RLS vs Filter for current user

Anonymous — Wed, 15 Sep 2021 12:58:08 GMT

Yet again the solution is there is no solution, please upvote. Well done all round clap clap

Re: RLS vs Filter for current user

Anonymous — Wed, 15 Sep 2021 13:00:26 GMT

Could I suggest having another status of Unresolvable? It saves me having to read through all the comments before I realise I'm completely wastiung my time

Re: RLS vs Filter for current user

Anonymous — Mon, 06 Dec 2021 06:17:16 GMT

Thanks @miguelarce - this saved some time 😉

https://community.powerbi.com/t5/Desktop/Show-Current-Logged-in-User-data-only/m-p/2219446/thread-id/810376#M811109