How to set a row level security with a user table

[Anonymous]

Hello,

I have already asked this question in the past.  However, I realize that I was a little bit confuse about workspace and app.

So to clarify the situation, only the IT admin as full access to workspaces.  For the app, we have many apps such one for HR, one for Fininance and so on.

So when we add the email of a person in a specific app, he or she will have access to all the dashboards publish in the app.

If I not wrong, if you don't have a pro license (not able to use the grant option), the only way we have to control the access to certain dashboard into a specific app it is with the help of the row level security.

So here's the situation.  Imagine that I elaborate a user table containing their emails, group and an access field which can be set to yes or no as below.

            email                                                 group         Access

firstname1.lastname1@orgemail.com  IT procurement, "yes"

firstname2.lastname2@orgemail.com  IT procurement, "yes"

....

firstname n.lastname n @orgemail.com  IT procurement, "yes"

Then we have a dashboard which have a table containing information on projects such a project number, phase number, sub phase number, Potential revenue, Status an so on.

The dashboard shows various slicers and a table (visualization tab) containing selected information from the Project table.

In that table, there is no email associated to an employee, while in the dashboard, we can restrict the access using RLS statement such as [Email]  (User Group) = userprincipalname()

So it seems difficult to make a link between that Project Table and the User Table.

So how can we restrict the access to that particular dashboard using the row level security and the user group, if that dashboard is published in an app to avoid certain app users to have access to it.

For example, in Finance app, 

we have let's say group1 and group2 who has access to the finance app.  The group2 correspond to the persons found into the User Group.  So using row level security, we would like to avoid the members of Group1 to have access to the project dashboard.

How can we do that?

[parry2k]

@Anonymous you have to manage that metadata what user can see what and then implement RLS based on that. I have few blog posts on RLS (link here), and see if those cal help.

[Anonymous]

Hello,

I have look at your posts on RLS  which I found quite interresting.  In your post "How to set default value of single slicer using RLS"

even if there is no relationship between your two tables, you have the team field in both.  In my projects, I don't have a similar case. 

On top of that, you have huge expertise in Power BI while in my case, I have few years.

So here's the situation.

In one of my dashboard, I have made some tests and if I set a filter of let's say Table1[geocode] = 99 for all pages, then no data are showed into the dashboard.

Moreover, we have predefined group using active directory user and computer such as let's say GroupA.  In that group, figure a list of persons who could be authorize to access the dashboard.  

As you know, I have very little experience with RLS and I wonder if there is a way to set the geocode to 99 for all pages if the username in not in GroupA and if it is clear the geocode filter.

Thanks in advance for your help.

Regards,

[Anonymous]

Hello,

I am sorry for the delay.  I will look at your publications and let you know if I have further question.

Thank you very for your Help.

Alain