Implementing Region-Level Security

[Ericathomas]

Is it  possible to implement region-level  security while ensuring queries remain fast?

[AmitDevkatte · Accepted solution]

Yes , it is possible to implement. It depends on how you model the data, for example apply the rls on dimregion table instead of facttable so that prunning will happen at early stage. the perfoarmance dependes on how complex dynamic cinditions are, if possible go for static rls if performace is priority.

Hope this will answer your doubt. if you are satisfied with answer please help to mark as solved and give a 👍 .

Thanks 😀

[v-echaithra]

Hi @Ericathomas ,

May I ask if you have resolved this issue? Please let us know if you have any further issues, we are happy to help.

Thank you.

[v-echaithra]

Hi @Ericathomas ,

Thank you @cengizhanarslan , @FBergamaschi, @AmitDevkatte   for your response.

We’d like to follow up regarding the recent concern. Kindly confirm whether the issue has been resolved, or if further assistance is still required. We are available to support you and are committed to helping you reach a resolution.

Thank you for your patience and look forward to hearing from you.
Best Regards,
Chaithra E.

[cengizhanarslan · Accepted solution]

It can stay fast if you model it the “star-schema + small security table” way.

• Star schema (one fact, region is a dimension key, not a text filter on the fact)

• Security table is small (users ↔ regions mapping), not millions of rows

• Filter flows User → Security bridge → Region dimension → Fact via keys (integers if possible)

• Avoid complex many-to-many patterns directly into the fact unless absolutely necessary

[AmitDevkatte · Accepted solution]

Yes , it is possible to implement. It depends on how you model the data, for example apply the rls on dimregion table instead of facttable so that prunning will happen at early stage. the perfoarmance dependes on how complex dynamic cinditions are, if possible go for static rls if performace is priority.

Hope this will answer your doubt. if you are satisfied with answer please help to mark as solved and give a 👍 .

Thanks 😀

[FBergamaschi]

Hi @Ericathomas,

yes, absolutely, with Row Level Security, static or dynamic, based on your needs.

If this helped, please consider giving kudos and mark as a solution

@me in replies or I'll lose your thread

Want to check your DAX skills? Answer my biweekly DAX challenges on the kubisco Linkedin page

Consider voting this Power BI idea

Francesco Bergamaschi

MBA, M.Eng, M.Econ, Professor of BI