Forum Discussion
Using DAX instead of RLS for multiple reports/security roles?
Hi EduSurveys ,
Check the below links
https://radacad.com/show-the-information-but-not-the-details-power-bi-data-masking
Regards,
HN
Did I answer your question? Mark my post as a solution! Appreciate with a Kudos!! (Click the Thumbs Up Button)
Anonymous , thanks for your proposed solution. I should clarify that I do not intend to give end-users access to the underlying dataset to make new reports. I just want end users to be able to see different data in the cloud service depending on which page of the report they're viewing. As a developer, I want to avoid having to make a different dataset for each report. However, some pages in the report require RLS (Instructor view and Department Head view), while some need to show all data (University view).
This depends very much on the sensitivity of your data but here is my approach:
I had a report for a group of sales reps that was controlled by RLS. It worked as designed, but it was totally not what the reps wanted. Yes, they need to focus on their area, but they also need to occasionally compare across regions etc.
The solution I came up with is to replace the "restrictive" paradigm of RLS with a "focused" paradigm that allows the sales reps to set a global filter to their name so they can focus on their area, but also allows them to clear the filter and see everything.
I fully understand that this is just one of many different business scenarios, and may or may not be applicable to your situation. But my sales reps are very happy with losing the shackles of RLS.
Net-Net - only use RLS if you absolutely, positively must do so. If possible, rely on non-technical agreements ("we're all adults here", or legal agreements) for keeping your data safe.
