Forum Discussion

JB_AT's avatar
JB_AT
Helper III
2 years ago

Role Level Security role Choice for users

Good morning

 

My research on this so far isn't positive, but I would like to ask anyway

I am building a data model with multiple RLS roles. It could be that a User has multiple roles. I'm using different Dimension tables example Employee > Line Manger, Department > Dept Manager etc...
From what I found out, the Role with the highest rights will see all the data for that highest rights role.

What I would like to achieve is that a User can choose a role for a report. Is this possible?

I was thinking of creating a table with all Roles and and a generated ID. Which would then have a one to Many relationship with all DIM tables.  I would create a slicer (Single select) from the Role table and this would filter the selected role and the related Dim Table with that role ID. Question is would the RLS highest rights still be activated?

I will test this, but if you have any other suggestions on how to acheive this, thiswould be great

 

Thanks

 

5 Replies

  • marcorusso's avatar
    marcorusso
    Most Valuable Professional

    RLS is applied when the user logs in, irrespective of the report. You cannot achieve what you want by using RLS.

  • Thank you PijushRoy  The process in the video is already known to me, I'm looking to build on top of that by adding a choice of roles for a user if they are included in multiple roles

     

  • Unfortunately I still haven't found a solution here.

    My dataset has multiple Dimension Tables that have a one to many relationship with a Fact Table.

     

    Within the dimension tables I have an email address of the respective person. I have created a rls role for each dimension [Email] = USERPRINCIPALNAME(). A user can appear in Multiple Role. RLS works as explained in the documentation and the role with the highest rights sees everything restricted to that role.

     

    Do any of the experts know how it would be possible for the User to switch roles within a report? I have tested my suggestion above, but it doesn't work due inactive relationships.

    Greg_Deckler  AlbertoFerrari  marcorusso