RLS dynamic logic

[PBIraja]

Hi all,

I need RLS dynamic logic  for the below requirement 

if manager=Y  he want to see his own  total branch  data

manager belongs to north branch he want to see all north branch data.

thanks,

raja.

[PBIraja]

@AllisonKennedy  

[AllisonKennedy]

@PBIraja are you able to supply sample data or have you solved this? If solved, please mark a solution.

[PBIraja]

@AllisonKennedy 

ok  i got it  your taking one table mapping to branch column.

but here one more issue 

based on 2 column how can we implment 

branch  is one column same like another column region he want to see total his region data

[AllisonKennedy]

@PBIraja  You're going to need to provide some sample tables/data please. How is region related to branch? Is branch a subset of region? If so then you can just use Region instead of Branch in the above example.

[AllisonKennedy]

@PBIraja what does your data model look like? Do you have a security group for managers? What should non-managers see?

You could add a simple security filter on the user table:

emil = USERNAME()

and then do the rest with relationships. This would probably require a separate AD group for managers and non-managers. 

Create a relationship from branch to your fact table in branch.

Please provide more details on your data model so we can assist further. Thanks!

[PBIraja]

yes i have AD groups for managers.

if i am taking userprincipal() it showing only his own data only but i need his from which branch he want to see the particular branch all branch data.

i implemented like this is it working

[branch] = [branch] && ([Manager] = "Y" || [Regional Manager] = "N")

[AllisonKennedy]

@PBIraja  again, it depends on your data model and relationships. If you have it working, please accept your post as a solution so others can benefit. If not working, please provide a screenshot of your relationships view. 

Thanks!

[PBIraja]

@AllisonKennedy 

his from which branch he want to see the particular branch total data.

i need RLS logic for the above statement.

[AllisonKennedy · Accepted solution]

@PBIraja AGAIN, please provide detail on your relationships. RLS works on the ENTIRE data model. 

See attached example, which assumes you do indeed have the AD group for managers, which means we can ignore the Manager = Y filter (your AD group does that already): 

[PBIraja]

@AllisonKennedy 

Suggest how to use two columns for single RLS role

we have branch and region also 

he want see his branch all data same like his region all data.