cancel
Showing results for 
Search instead for 
Did you mean: 

Fabric is Generally Available. Browse Fabric Presentations. Work towards your Fabric certification with the Cloud Skills Challenge.

Reply
itsmebvk
Responsive Resident
Responsive Resident

Rowlevel Security Issue when comparing with parent value?


Hi Folks,

 

I am facing some issues with row level security, hope you can give me a direction to fix this issue.

 

I have a report with three measures one Location_Measure , State_Measure and Location Vs State Profit. Location Vs State Profit measure  is calculating my Location share in state total Profit. I have a row level security applied on Location,

 

when a location manager check the report they should be only able to see Profit for that location and this location contribution% to total state profit. This is working fine in desktop when we publish it to service and when the location manger check the report its  not showing Location Vs State Profit correctly because of security on location.

 

CALCULATE([Profit]

,all(location_RLS)

,all(location_dim)

,values(location_Dim[stae]))

 

Can you please suggest if there are anyways to overcome this issue?

Thanks in advance.

5 REPLIES 5
selimovd
Super User
Super User

Hey @itsmebvk ,

 

how does the RLS look like?

Is he able to see the details of location and state?

 

Best regards

Denis

itsmebvk
Responsive Resident
Responsive Resident


HI @selimovd 

 

yes, that location manager able to see location number and state name. But because of his login both location and state level measure is showing same value.

 

Thank you.

Hey @itsmebvk,

 

and let me guess, he should see the total of the state, but only the total but no details from other locations? 

 

Best regards

Denis

itsmebvk
Responsive Resident
Responsive Resident


@selimovd  That's exactly what I am looking for.

Hey @itsmebvk ,

 

that's a little bit of an issue.

So if you use row level security, then the rows that a person should not see are gone when we is opening the report. This means also the total of a specific row is only the total of what he is allowed to see.

 

If you want him to only the the total, but no details, then you have to make sure the DAX measures ALWAYS consider the total and he has chance to change the report and for example use the column that you don't want him to see details. This is not security, this is you trying to hide existing information from him.

If the user only has viewer permission and no build permission, then it could work. But if the user ever gets build permisson on the data set or if you or another report creator create a measure that does return details on this column, then he will be able to see everything. So you can try that approach, but this approach is dangerous as you have to make sure he will never be able to see the values.

 

If you need any help please let me know.
If I answered your question I would be happy if you could mark my post as a solution ✔️ and give it a thumbs up 👍

Best regards
Denis

Blog: WhatTheFact.bi
Follow me: twitter.com/DenSelimovic

Helpful resources

Announcements
PBI November 2023 Update Carousel

Power BI Monthly Update - November 2023

Check out the November 2023 Power BI update to learn about new features.

Community News

Fabric Community News unified experience

Read the latest Fabric Community announcements, including updates on Power BI, Synapse, Data Factory and Data Activator.

Dashboard in a day with date

Exclusive opportunity for Women!

Join us for a free, hands-on Microsoft workshop led by women trainers for women where you will learn how to build a Dashboard in a Day!

Power BI Fabric Summit Carousel

The largest Power BI and Fabric virtual conference

130+ sessions, 130+ speakers, Product managers, MVPs, and experts. All about Power BI and Fabric. Attend online or watch the recordings.

Top Solution Authors
Top Kudoed Authors