AAS Dax filter

[MCALDERON]

Hi all, I need to understand how AAS work... so this is the scenario... 

We currently use a cube on AAS, we have multiple role that we edit and manage from visual studio. Right now we have role1 and role2.

Role1: gives access to a product. 

Role2: gives access to a center and some plants 

Both roles can be assign to the same person. I think we need to do OR or AND filters for it to work as expected. My question is, is it possible to do in AAS roles? like combining columns filters as "plant=1 AND product=1234"? If not I would like to understand how AAS prioritize the filters that the columns have. 

[123abc]

In Azure Analysis Services (AAS), you can control data access using roles and role members. Roles are used to define different levels of access to the data model, and you can assign one or more roles to a user or group. Roles can have filters defined on them to control what data the members of the role can access. These filters can be used to restrict data based on certain criteria, such as column values.

In your scenario, it sounds like you want to control access to the data based on a combination of conditions. You can achieve this by defining filters in the roles in AAS. Filters can be based on one or more columns and can use logical operators like AND and OR.

Here's how you can implement your scenario:

1. Create Roles: In AAS, you can create roles for Role1 and Role2.

2. Define Filters: In each role, you can define filters based on the columns you want to use for access control. For example:

   • Role1 Filter: You can set a filter that allows access to data where the "product" column equals a specific value (e.g., product = 1234).

   • Role2 Filter: You can set a filter that allows access to data where the "plant" column equals a specific value (e.g., plant = 1).

3. Combine Filters: To combine filters, you can use logical operators like AND or OR. For example, if you want a user to have access to data where both conditions are met, you can create a new role and combine the filters:

   • Combined Role (Role3): You can define a filter that combines both conditions using AND:
     • (plant = 1) AND (product = 1234)

4. Assign Roles to Users/Groups: After creating the roles and defining filters, you can assign one or more of these roles to users or groups as needed. Users who have multiple roles assigned will have the combined filter criteria applied.

AAS will prioritize the filters based on the role membership. If a user is a member of both Role1 and Role2, the combined filter of Role3 will be applied because it includes both filter conditions.

By using role-based security and filters, you can control data access in AAS based on the specific conditions you require, and you can combine filters as needed to achieve your desired level of access control for different users or groups.

If this post helps, then please consider Accepting it as the solution to help the other members find it more quickly.

In case there is still a problem, please feel free and explain your issue in detail, It will be my pleasure to assist you in any way I can.