Forum Discussion

Nazdac911's avatar
Nazdac911
Helper II
3 years ago

Advanced Power BI security Scenario

Hi all 
I am facing a big challenge to build a security system inside my compnay , 
its simillar to the follwing problem : 

imagine a school system : 

I have three dim tables (Managers , Teachers and Students) that are suppose to have access to the result table in deifferent levels : 

- Managers have two level of access full , and limit and limit depends on the year 

 

- Teachers are allowed to access their subjects in their years 

 

- Student can only access their grads. 

 

Now I need to achieve this and I don’t know what is the starting point , I could rebuild the whole data model and add columns to the tables. 

 

It will be great if I received you feedback and your suggested solution to solve this . 

 

Any YouTube videos that discuss something similar  or articles will be highly appreciated 🙂 

I know their are no short answer for this , but I hope it will be usefull for everybody to solve sutch a problem 🙂 
Thanks in advacne 

REgards 

Need Help
Tutorial Requests

3 Replies

  • lbendlin's avatar
    lbendlin
    Super User
    3 years ago

    First you need to decide if you want to use static RLS (based on Role group membership) or dynamic RLS (based on individual USERPRINCIPALNAME).

    • Nazdac911's avatar
      Nazdac911
      Helper II
      3 years ago

      Since its groupe level security so I will use static RLS !

      • lbendlin's avatar
        lbendlin
        Super User
        3 years ago

        Cool. Next step is to define the roles. I think you have that already. Next step is to define the scope for each role, ie the DAX formula that evaluates to true for each of them.  These formulas then need to be applied to the DIMENSION tables in your data model. No point in applying the RLS to fact tables - the RLS rules must be able to impact filters.