Forum Discussion
scoder
2 years agoFrequent Visitor
RLSs security implement to different level of access restriction
I have a few dashboards built to show sales, revenue, expenses, usage etc , I need to build an access control for these dashboards
High-level requirement access is
- There is a global head for each product, they should be able to access details across all regions and locations for the product they are head of. For example, the Global head for TV, can access TV sales across all regions and locations
- Similarly, there will be a region head for each product, they should be able to access details across all locations in that region.
- There will be a location co-head for each product, they can access details of that particular location for the product he/she is head of.
And below is the sample table of product, region and location.
| Product | Region | Location |
| TV | America | Texas |
| TV | America | New York |
| TV | Europe | Germany |
| TV | Europe | Italy |
| TV | Greater China | Shandong |
| TV | Greater China | Zhejiang |
| TV | Japan | Tokoyo |
| TV | Japan | Kyoto |
| TV | Rest of Asia | India |
| TV | Rest of Asia | Singapore |
| Mobile | America | Texas |
| Mobile | America | New York |
| Mobile | Europe | Germany |
| Mobile | Europe | Italy |
| Mobile | Greater China | Shandong |
| Mobile | Greater China | Zhejiang |
| Mobile | Japan | Tokoyo |
| Mobile | Japan | Kyoto |
| Mobile | Rest of Asia | India |
| Mobile | Rest of Asia | Singapore |
So I am planning to design the roles as below
- Roles for each product to be assigned to Global product heads
- Roles for each product and region combination, are to be assigned to region heads
- Roles for each product and location combination, to assign to location co-head
But these would end up creating too many roles and also will have operation maintenance issues when a new product is added.
is there a simple way in power-bi space to build ACL for these kinds of requirements?
1 Reply
- AnonymousNot applicable
You should be able to achieve this using PATH and USERPRINCIPALNAME functions. See RADACAD article here for more details Dynamic Row Level Security with Organizational Hierarchy Power BI - RADACAD