Forum Discussion
Role Level Security on Multiple Tables
I want to set up role level filters using 2 different tables. The default filter is to make this an 'and' filter, meaning I only want the cross sections from these two tables. I need the filters to be an 'or' filter, meaning that I need all from both sections.
For example, say I have a sales team table and a location table. I want to view all of John Doe's sales and all of US Sales in the same report. Right now, I can only figure out how to see John Doe's sales in the US.
I believe we were overthing this. I accidentally posted this same question twice, but the solution is on the other one. I simply put a filter on the sales table for the Employee ID and Location Code.
7 Replies
- Try something like this. Create a table with the users and country combination
- The set BI directional filters to your dimension tables, user and country
- In your manage role, put your security filter on the bridge table
By filtering the bridge table, you will propogate filter using the bi-directional relationships to your other 2 dimensions. This should give you the OR clause that you are looking for.
Remember that you need to include for John Doe a list of all the countries that he should have access to. Not just the US.
Let me know how you get on.
This is a great creative solution, however this does not work for me. My hierearchies currently have a relationship with a common table that has sales. Power BI will not let me create a full circle of relationships between tables due to abiguity in filtering. Please see my sample data below.
Country City Location ID U.S. Ney York A U.S. Atlanta B U.S. Chicago C Canada Toronto D Canada Ottawa E Sales Manager Sales Person Employee ID John Doe Jane Doe 1 John Doe Janet Jackson 2 John Doe Tito Jackson 3 Rick Ross Nick LaChey 4 Rick Ross Justin Timberlake 5 Rick Ross Steve Austin 6 Employee ID Location ID Amount 1 E $ 500.00 1 A $ 300.00 1 B $ 250.00 2 C $ 750.00 2 C $ 650.00 3 D $ 200.00 4 D $ 320.00 5 C $ 890.00 5 C $ 400.00 6 C $ 165.00 6 E $ 500.00 6 A $ 230.00 6 A $ 320.00 You can still use the bridge table concept, the key it to ensure that you have the combination of all the users and countries that exist in your data set.
Remove the BI directional joins and instead use the following code against the user table and country table under manage roles:
User:
CONTAINS (
FILTER ( SecurityBridge, [User] = USERNAME () || [Country] = "US" ),
'SecurityBridge'[User], 'User'[User]
)Country
CONTAINS (
FILTER ( SecurityBridge, [User] = USERNAME () || [Country] = "US" ),
'SecurityBridge'[Country], Country[Country]
)This will filter the bridge table for a list of user that are either in the country or is that actual user. You can then filter the user table appropriately and do the samething for the country table. This should give you the correct combinations.
Let me know how you get on.
- Try something like this. Create a table with the users and country combination
