topic Re: Dynamic RLS with embedding in Report Server

Dynamic RLS with embedding

RajaSadagopan — Fri, 30 Aug 2024 18:06:34 GMT

Hi,

So I have embedded a powerbi report in another web application. To view the report, user needs to login. Now the report has data for all departments. But the logging in user belongs to some specific department and he should be given access to view only that data.

Now the data part, The report contains 5 dashboard from 5 fact tables. All the fact table has department id which is mapped to a dim_department table (DIMENSION TABLE). Out of the 5 fact tables, we have fact_user table containing the username by which the user is logged in, his department ID and several other information which is required for dashboarding purpose.

Tricky Part: There are around 30000 users logging into the web application from different domain without powerbi license. So we embed the report by Service principal (Azure Active Directory).

How to apply RLS at department level in powerbi while embedding??

Re: Dynamic RLS with embedding

lbendlin — Fri, 30 Aug 2024 20:12:20 GMT

So we embed the report by Service principal

Don't do that?

There are around 30000 users logging into the web application from different domain

From outside your Entra ID?

Is your RLS applied to one of the dimension tables? What is it based on? Mapping from userprincipalname to department?

Re: Dynamic RLS with embedding

RajaSadagopan — Sat, 31 Aug 2024 08:41:20 GMT

No we have not applied RLS to dim table! The username in fact_user is the username used to login to the web application. The username is linked to department via department ID

Re: Dynamic RLS with embedding

lbendlin — Sat, 31 Aug 2024 12:07:15 GMT

RLS must control the data model. It needs to be applied to a dimension table on the outside of the star schema.

Re: Dynamic RLS with embedding

RajaSadagopan — Wed, 04 Sep 2024 09:06:13 GMT

Thanksss Bro ❤️