Page Level Security along with User Roles

[Anonymous]

Hi All,

I am trying to implement Page Level Security in Power BI . As in there are multiple pages inside a single Power BI Report, and based on the user logged in, he/she will be able to see only selected reports. 

For this I need to create a home page with buttons, and buttons will redirect to actual page containing visuals (All pages except the home page are hidden).

I followed below article to implement at individual user level.

https://www.fourmoo.com/2020/05/26/did-you-know-you-can-now-selectively-show-report-pages-for-specif...

I need to have Buttons on home page and by following above article for data modeling - as of now I am using below measure to decide whether which user can see which buttons.

Profit Color = IF(CALCULATE(MAX('Pages for Users'[Value]), FILTER('Pages for Users', 'Pages for Users'[Email] = USERPRINCIPALNAME()), FILTER('Pages for Users', 'Pages for Users'[Page name] = "Profit")) = "1", "#118dff", "#ffffff")

i.e Color of button will change to White if there is no corresponding entry for that user against the page button.

Now, the issue I am facing is that, how to implement it via User Roles. Since my user base is big, we have created User Roles like Admin, Profit, Sales etc. Whoever resides in 'Profit' group, should be able to see Profit Reports.

So instead of above table, wherein there is a record for each user and page entry, I need to have Page and User Role entry so that it doesn't become a maintenance headache. 

Can someone please help me how to tweak above solution to work for User Roles/Groups instead of individual users. @GilbertQ  @amitchandak 

[v-stephen-msft]

Hi @Anonymous ,

It is suggested to use Dynamic Row Level Security with Organizational Hierarchy.

Refer if these can help

Dynamic Row Level Security with Organizational Hierarchy Power BI - RADACAD
https://www.blue-granite.com/blog/using-dynamic-row-level-security-with-organizational-hierarchies

Best Regards,

Stephen Tao

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[GilbertQ · Accepted solution]

Hi @Anonymous 

What I would do is to use AD Groups to maintain a list of users and then use the AD Group to link it to the page names.

You could modify my other blog post here which shows how to use AD Groups with RLS (In my example is country but this could be changed to page names)

Dynamic Row Level Security is easy with Active Directory Security Groups - Reporting/Analytics Made easy with FourMoo and Power BI

[lbendlin]

Where do you want to maintain the groups - in the Power BI service (as role members) or in an external data source like AD ?