RLS with groups on multiple levels

[olivierlaloo]

Hi All,

I have a report where i would like to apply the following security (for a customer)

• Company owner can see all data
• Sales representative group level 1 with multiple users
• Sales representative group level 2 with multiple users
• Sales representative group level 3 with multiple users

Customers are linked to level 1, 2 or 3.

The security should be setup like:

• Company owner should be able to see all data
• sales rep that belongs to group level 3 can only see his customers
• sales rep that belongs to group level 1 can see
  • his customers (linked to group 1)
  • all customers linked to group 2 (which falles under group 1)
  • all customers linked to group 3 (which falls under group 1 & 2)

Question to you: how can this be achieved? Did someone already implement this? Is it possible?

Thanks !

[v-sihou-msft]

@olivierlaloo

In this scenario, I suggest you use a numeric Level Column. Then you can apply row level filter like:

Table[Level]>=LOOKUPVALUE(Table[Level],Table[UserName],USERNAME())

Or you can consider using SSAS multidimension model as source. You can create a hierarchy for Employee, then apply cell level and dimension security based defined roles. Please refer to docs below:

Roles and Permissions (Analysis Services)

Connect to SSAS Multidimensional Models in Power BI Desktop

Regards,

[olivierlaloo]

Hi Simon,

Could you provide me with a bit more information on how to implement it using this numeric level column?

Thanks for your help!