Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
1 year ago

RLS setting Question

How to create a report with RLS control and a report that is not restricted by RLS in a pbix file without copying a fact table (because the fact table is too big and I don't want to copy it)?
Need Help
Tips and Tricks
rajendraongole1's avatar
rajendraongole1
Super User
1 year ago

Hi Anonymous  - To create a report in Power BI with Row-Level Security (RLS) control and another report without RLS restrictions within the same PBIX file, without duplicating the fact table, you can use measures and filters creatively. 

 

attached the detailed steps, please follow and also sharing some resource please check

The Solution You Need for Dynamic Row Level Security: Semantic Model for User Access Table | by Avishek Ghosh (AV_DEVS) | Microsoft Power BI | Medium

Row-level security (RLS) guidance in Power BI Desktop - Power BI | Microsoft Learn

 

 

 

  • Anonymous's avatar
    Anonymous
    Not applicable
    1 year ago

    Thanks for your answer, this solution seems to inevitably copy the fact table, which will cause the file to remain very large❤️

    • rajendraongole1's avatar
      rajendraongole1
      Super User
      1 year ago

      Hi Anonymous  - You're absolutely right to aim for a solution that avoids duplicating the fact table and keeps the file size manageable. 

      Instead of relying on separate tables for restricted and unrestricted data, you can use DAX measures to dynamically control data visibility based on a toggle (eg. , slicer or parameters)

       

      I hope this details helps. Thank you

    • Anonymous's avatar
      Anonymous
      Not applicable
      1 year ago

      Hi Anonymous ,

       

      According to your statement, I think your requirement is to create a report with two pages one is under RLS control and another is not.

      As far as I know, if you add RLS in your data model, users in each role can see the corresponding data. 

      For example, if UserA in role1, then UserA could only see that RLS restricts the data that role1 can see. We couldn't let UserA see all data without RLS at the same time.

      So create a new report without rls or add a duplicate fact table may be the workaround.

      If you want to restrict specific people to see data and some other people could see all data, you can try to user UERPRINCIPALNAME() to configure dynamic RLS.

      Dynamic Row Level Security with Power BI Made Simple - RADACAD

       

      Best Regards,
      Rico Zhou

       

      If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.