Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
8 years ago

Set security only for certain data

Hello all,

We have a financial Power BI report which can basically be viewed by anyone in the organisation, however, only a limited number of people can see the profitability figure.

Right now, I am creating role-level-security with two groups (one can see the restricted figure and one cannot). However, this is quite cumbersome for me because I need to add people one by one into the right group, eventhough they are supposed to still see the unrestricted figures in any circumstances.

Is there an option to restrict only a certain data in the report? So that if a person is added in the group with the right to see data, they can see it. Otherwise, they can still see the rest of the data.

Thanks,

Need Help

6 Replies

  • Anonymous's avatar
    Anonymous
    Not applicable
    8 years ago

    Hi Anonymous,

     

    I think you can take a look at below link which told about use RLS with USERNAME fucntion to achieve dynamic RLS.

    RLS with UserName()

     

    >>Is there an option to restrict only a certain data in the report?

    I'd like to suggest you enable the filter on specific data table and turn off 'apply security filter in both directions' option to apply security filter effect on only one side.

     

     

    Regards.

    Xiaoxin Sheng

    • Anonymous's avatar
      Anonymous
      Not applicable
      8 years ago

      Hi Anonymous,

      First of all thank you very much for your help! Sorry I did not explain the case clear enough. Let's say I have this table:

      Business: Profit

      A             13
      B             14

      C             15

       

      Only managers can see profit for A, other people can only see the rest (B and C and other business). I have the list of managers, but not the list of other people (basically anyone else in the organisation). I have tried dynamic rls, but can not find any solution so that I dont need to go to the Power BI service and add each of the other people in.

      Is there a solution to this case? Thank you!

      • Anonymous's avatar
        Anonymous
        Not applicable
        8 years ago

        Hi Anonymous,


        I think you need to create role table to add tag for users.(mark normal user and manage)


        For rls filter condition, I'd like to suggest you to use username find out role tag. If tag not manager, filter on Business column with value not equal to "A", otherwise not enable filter.

         

        Sampel table:

        User Premission
        [email protected] User
        [email protected] User
        [email protected] Manager

         

         

        Measure:

         

        Permission = LOOKUPVALUE(Table[Role],Table[User],USERNAME())

         

         

        Filter expression:

         

        IF (
    ISERROR ( SEARCH ( "Manager", [Permission] ) ) = FALSE (),
    TRUE (),
    [Business] <> "A"
)

         

         

        Regards,

        Xiaoxin Sheng