RLSs security implement to different level of access restriction

[scoder]

I have a few dashboards built to show sales, revenue, expenses, usage etc , I need to build an access control for these dashboards 

High-level requirement access is

1. There is a global head for each product, they should be able to access details across all regions and locations for the product they are head of. For example, the Global head for TV, can access TV sales across all regions and locations  
2. Similarly, there will be a region head for each product, they should be able to access details across all locations in that region.  
3. There will be a location co-head for each product, they can access details of that particular location for the product he/she is head of. 

And below is the sample table of product, region and location. 

Product	Region	Location
TV	America	Texas
TV	America	New York
TV	Europe	Germany
TV	Europe	Italy
TV	Greater China	Shandong
TV	Greater China	Zhejiang
TV	Japan	Tokoyo
TV	Japan	Kyoto
TV	Rest of Asia	India
TV	Rest of Asia	Singapore
Mobile	America	Texas
Mobile	America	New York
Mobile	Europe	Germany
Mobile	Europe	Italy
Mobile	Greater China	Shandong
Mobile	Greater China	Zhejiang
Mobile	Japan	Tokoyo
Mobile	Japan	Kyoto
Mobile	Rest of Asia	India
Mobile	Rest of Asia	Singapore

So I am planning to design the roles as below 

•   Roles for each product to be assigned to Global product heads 
•   Roles for each product and region combination, are to be assigned to region heads 
•   Roles for each product and location combination, to assign to location co-head 

But these would end up creating too many roles and also will have operation maintenance issues when a new product is added. 

is there a simple way in power-bi space to build ACL for these kinds of requirements? 

[Anonymous]

You should be able to achieve this using PATH and USERPRINCIPALNAME functions. See RADACAD article here for more details Dynamic Row Level Security with Organizational Hierarchy Power BI - RADACAD