dymanic RLS

[CharanIndukuri]

If we use userprincipalname() we can map or restrict countries access, My question is how can we remove access for 100 people out of 1000 people in a table? 

[rajendraongole1 · Accepted solution]

Hi  @CharanIndukuri- you can create a table that maps users (UserPrincipalName()) to the countries or data they are allowed to access. Include a flag or a condition to identify the users who should have no access. 

create RLS Table as like below:

create a RLS security table as below:

Users with Access = 0 are restricted from accessing any data.

you can define the role in modelling as like below:

[UserEmail] = USERPRINCIPALNAME() && [Access] = 1

In Power BI Desktop:
Go to the Modeling tab → Manage Roles.
Create a new role and apply the DAX rule above to the security table.
Publish the report to Power BI Service.
Assign users or groups to the RLS role in Power BI Service.