Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Find everything you need to get certified on Fabric—skills challenges, live sessions, exam prep, role guidance, and more. Get started

Reply
tomperro
Helper III
Helper III

Hide Specific Column Using Object Level Security and Field Parameters - Broken Visual

 

I was able to implement OLS suing the tabular editor, however, the visual would be broken online.  I came across this video, https://www.youtube.com/watch?v=dXxv39X884Q but they are using email address to assign access level.

 

However, I need to create the field access based on another value other than email address.

I have a long list of employees (over 1000) and the access level is based on their job position in Azure groups. If an employee changes positions, they will lose access to my current reports but the position that person had will still have access to the reports, so when a new employee takes that position, they will automatically have access to my reports so I can not use email address.

5 REPLIES 5
Greg_Deckler
Super User
Super User

@tomperro You tie the OLS to an RLS role in Tabular Editor. Then in the Power BI Service, you put as members of the RLS role the Azure AD group. 

Object-level security (OLS) with Power BI - Power BI | Microsoft Learn

Row-level security (RLS) with Power BI - Power BI | Microsoft Learn


Follow on LinkedIn
@ me in replies or I'll lose your thread!!!
Instead of a Kudo, please vote for this idea
Become an expert!: Enterprise DNA
External Tools: MSHGQM
YouTube Channel!: Microsoft Hates Greg
Latest book!:
The Definitive Guide to Power Query (M)

DAX is easy, CALCULATE makes DAX hard...

@Greg_Deckler @How can I get the information from Active Directory?  I am looking for dynamic security groups.  I am able to see other groups but can't see dynamic groups. Are those stores in another table other than groups?

@tomperro  Did you ever come up with a solution for this?

Greg_Deckler
Super User
Super User

@tomperro If you pulled in email addresses and positions into your PBIX then you should be able to create roles based on position and tie those roles to your Azure/Office 365 groups.


Follow on LinkedIn
@ me in replies or I'll lose your thread!!!
Instead of a Kudo, please vote for this idea
Become an expert!: Enterprise DNA
External Tools: MSHGQM
YouTube Channel!: Microsoft Hates Greg
Latest book!:
The Definitive Guide to Power Query (M)

DAX is easy, CALCULATE makes DAX hard...

@Greg_Deckler 
Current configuration - I created a few dynamic security groups in MS Azure and assigned them to the role that I created in BI (HideAll & ViewAll). The ViewAll role can view everything while the HideAll role cannot see anything.  I then added each security group to the ViewAll role on BI Service. This works perfectly. 

 

I need a way that I can hide employee name in one of my visuals, so I I added OLS using tabular editor for one field (employee name) in one of my tables.  I then created a parameter on the visual.  This is from the video mentioned in my origianl post.  

 

I am not sure how to set which parameters are visable based on the Azure Group.

 

So for example:

Supervor Dynamic Security Group should be able to see the employee name on the visual

Employee Dynamic Security Group should not be able to see the employee name on the visual

 

Helpful resources

Announcements
Europe Fabric Conference

Europe’s largest Microsoft Fabric Community Conference

Join the community in Stockholm for expert Microsoft Fabric learning including a very exciting keynote from Arun Ulag, Corporate Vice President, Azure Data.

July 2024 Power BI Update

Power BI Monthly Update - July 2024

Check out the July 2024 Power BI update to learn about new features.

July Newsletter

Fabric Community Update - July 2024

Find out what's new and trending in the Fabric Community.