RLS

[Anonymous]

Hi,

I have a Power BI report with P&L data at the customer, country and region level. I received a request to

- restrict sales managers' access based on customer, country and region. For example; when sales manager X opens the report, he should only see customer Y data in Europe

- business leaders need to be able to see the whole unfiltered report

I am not sure how to go about setting this up. Any help is greatly appreciated.

Thank you

[amitchandak · Accepted solution]

@Anonymous , What I usually do is I get email and list off access of county in one table and email and list of customer and configure RLS on both using userprincipalname

Business leader should have access to all locations/country 

[amitchandak · Accepted solution]

@Anonymous , What I usually do is I get email and list off access of county in one table and email and list of customer and configure RLS on both using userprincipalname

Business leader should have access to all locations/country 

[Anonymous]

@amitchandak Country level RLS is no longer required. It's only region and customer. I setup two different tables as you mentioned connected to the respective main tables in the report with cross filter direction "both" and two way security enabled.

Table 1 - User email and region (connected to the main region table in the report) 

Table 2 - User email and customer (connected to the main customer table)

Under modelling, I created a role with filters on table 1 and table 2 -> User email = userprincipalname(). I then published the report and added users to the role under security in the dataset. However, the users are still able to see all the data. Please advise.

[v-easonf-msft · Accepted solution]

Hi, @Anonymous 

Has the user been assigned a role other than "Viewer" in the workspace? RLS cannot take effect on roles (admins, members, contributors) that have access to dataset.

Best Regards,
Community Support Team _ Eason

[Anonymous]

@v-easonf-msft The users were assigned to the 'member' role. I updated it to 'viewer' and RLS is working. Thanks for your input!