Forum Discussion

KellyDittmar's avatar
KellyDittmar
Icon for Advocate IV rankAdvocate IV
8 years ago

Security to control field display (SSAS dataset)

My dataset is an SSAS tabular cube. 

 

In the cube - I have 2 "types" of data. 

A: shared corporate data - materials, customers, dates, etc

B: sensitive data - required by a subset of folks by department (ie finance or operations or sales)

 

Therefore - I have access "rules"

A: Everyone can see this

B: only a subset of folks (based on AD group) can see this

 

What works great:

I set this up using the Models > Roles options in my tabular cube. When someone who doesn't have access to something in group B tries to see the data - they get (Blank) rather than the data. 

 

What doesn't work great:

In the field list - all tables are listed - including the tables the user has no access to. Users are building their own reports, so I field "issue calls" daily that they "get nothing when they are building their report" which is actually by design... so I am in an endless loop of explaining what's happening & why. (So much fun!). 

 

What I need: 

Does anyone know if there is a way to display or hide objects from the fields listing based on a user's access to those objects? Like a dynamic hide option? My research has revealed nothing - but I remain optimitic that I just don't have the righ search criteria! 

3 Replies

  • Anonymous's avatar
    Anonymous
    Not applicable

    KellyDittmar,

    From Power BI side, it is not possible to dynamically hide the objects based on user access. To work around this issue, you may need to create perspectives in SSAS for different users, for more details about perspective, you can post the question in in the SSAS forum to get dedicated support.

    Regards,
    Lydia

    • KellyDittmar's avatar
      KellyDittmar
      Icon for Advocate IV rankAdvocate IV

      Lydia - I had some time to play with this today - what a great feature!

       

      Do you know if there is anyway to automatically give someone a perspective based on their membership in a certain role in the cube? There's nothing that I've seen that would allow me to associate them, so I assume the answer is that it's not possible. 

       

      Kelly

      • Anonymous's avatar
        Anonymous
        Not applicable

        KellyDittmar,

        Regarding to your question, please post it to SSAS forum to get dedicated support.

        Regards,
        Lydia