Switching to dynamic RLS

[Mous007]

Hi all, I was using static RLS in the model attached to grant access to users based on their function and it was working fine.

Each test is related to a specific function and some tests can be in more than one function as per below

In addition to accesses based on the user function, as an additional requirement i also have to grant the same users the same access based on the function but also based on the regional or just country access.

For the region/country mapping, each unit is assigned to a specifc country and region but access can be either granted on a regional or country level (which makes my task even more complicated)

I created roles same as i did before and granted each user access to a role based on the function filter and a second one based on the region or country but for some reason it does not work and users can view all data (functions and region)

My fact table is below and each unit has tests to run with the respective result.

Mymodel sample is attached and would really appreciate if someone can show me how i can implement dynamic RLS in this case to grant accesses based on both the function and the region OR country depending on the request. any useful link for my case would also be appreciated.

my sample is attached here for you reference.

Thaank you

[Anonymous · Accepted solution]

Hi  @Mous007  ,

I create this data：

Here are the steps you can follow：

1. Select Manage roles in Modeling and use the userprincipalname() function

2. Select View as

3. Enter the user’s email to enter the View mode

4. Result

Only the contents of the input mailbox will be displayed in the table:

You can downloaded PBIX file from here.

For information about dynamic RLS, you can check the following link:

https://radacad.com/what-do-you-need-to-implement-dynamic-row-level-security-in-power-bi

https://radacad.com/dynamic-row-level-security-with-power-bi-made-simple

https://docs.microsoft.com/en-us/power-bi/admin/service-admin-rls

Best Regards,

Liu Yang

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.