Row Level Security

[nleuck]

Hello All,

I have two issues I'm trying to figure out with Row Level Security and could use some help

1. I have three tables; one has all detail data, one has a list of account managers, and the other has a list of regional sales managers. I have a relationship between each list table to the detail data. Both relationships are one to many.

I have two different roles set in Power BI Desktop.

Role: AccountManager

Table: AccountManagerList
DAX: AccountManagerWorkE-Mail = USERPRINCIPALNAME( )

Role: RegionalSalesManager
Table: RSMList
DAX: RSMWorkE-Mail = USERPRINCIPALNAME( )

When I set the security in the Service and test on the AccountManager everything works as expected and filters the data based on who is logged in, but when I set the security for RegionalSalesManager it doesn't work. It shows me all the data. Not sure how to fix this.

2. I have some executives that would like to review all the data on the same report. Is this possible? There isn't any way to tie them to the data so I'm not sure how that would work.

Thanks in advance!

[nleuck]

@Greg_Deckler 

Would you happen to have any other ideas I could try?

Thanks!

[nleuck]

@Greg_Decklerand @amitchandak

There is an issue with trying the organizational hierarchy. In the sales detail table, the data is broken down like so (these are just a few examples of the columns I have) :

Columns:

SalesOrderId

CustomerId

CustomerName

SalesDate

SalesAmount

AccountManagerLoginId

AccountManagerName

RegionalSalesManagerLoginId

RegionalSalesManagerName

In the examples you shared the users are all in one column which makes it easier to set up row security as one role. I have to create two different roles one for Account Managers and one for Regional Sales Managers.

[Greg_Deckler]

@nleuck Not certain, but sounds like you want something like this?

https://community.powerbi.com/t5/Quick-Measures-Gallery/Dynamic-Hierarchical-Row-Level-Security/m-p/...

Yes, for an "all" role, one way is to set a rule like the following:

TRUE()

Or make them owners of the workspace.

[nleuck]

@Greg_Deckler 

For the "all" role what do I set for TRUE()?

[Greg_Deckler]

@nleuck Doesn't have to be anything, just needs to return true. Another method is pick something that will always have a value and use NOT(ISBLANK([Column]))

Also, I think if you share the report with someone that is not in a role they will see everything but I never trust that! I always want everyone in a role.