Hide Specific Column Using Object Level Security and Field Parameters - Broken Visual

[tomperro]

I was able to implement OLS suing the tabular editor, however, the visual would be broken online.  I came across this video, https://www.youtube.com/watch?v=dXxv39X884Q but they are using email address to assign access level.

However, I need to create the field access based on another value other than email address.

I have a long list of employees (over 1000) and the access level is based on their job position in Azure groups. If an employee changes positions, they will lose access to my current reports but the position that person had will still have access to the reports, so when a new employee takes that position, they will automatically have access to my reports so I can not use email address.

[Greg_Deckler]

@tomperro You tie the OLS to an RLS role in Tabular Editor. Then in the Power BI Service, you put as members of the RLS role the Azure AD group. 

Object-level security (OLS) with Power BI - Power BI | Microsoft Learn

Row-level security (RLS) with Power BI - Power BI | Microsoft Learn

[tomperro]

@Greg_Deckler @How can I get the information from Active Directory?  I am looking for dynamic security groups.  I am able to see other groups but can't see dynamic groups. Are those stores in another table other than groups?

[arock-well]

@tomperro  Did you ever come up with a solution for this?

[Greg_Deckler]

@tomperro If you pulled in email addresses and positions into your PBIX then you should be able to create roles based on position and tie those roles to your Azure/Office 365 groups.

[tomperro]

@Greg_Deckler 
Current configuration - I created a few dynamic security groups in MS Azure and assigned them to the role that I created in BI (HideAll & ViewAll). The ViewAll role can view everything while the HideAll role cannot see anything.  I then added each security group to the ViewAll role on BI Service. This works perfectly. 

I need a way that I can hide employee name in one of my visuals, so I I added OLS using tabular editor for one field (employee name) in one of my tables.  I then created a parameter on the visual.  This is from the video mentioned in my origianl post.  

I am not sure how to set which parameters are visable based on the Azure Group.

So for example:

Supervor Dynamic Security Group should be able to see the employee name on the visual

Employee Dynamic Security Group should not be able to see the employee name on the visual