Forum Discussion
Ability to fetch SAP BW data respecting user's authorization
Hi Ruben,
After investigating this in my organization we decided to forgo bringing in the BW roles and just use the management chain that was maintained in Active Directory (AD) by our Human Resource department.
I have a direct connection to AD from Power BI to get a few dimensions (company, username, e-mail address, and management chain (that contains all the e-mail addresses of users that have access to the data). I delimite the management chain column so that there is a column for each user in the access chain.
I then do merge in Power BI between our sales data and the AD data to bring in the management chain columns to each row in my sales data.
Lastly, I created a role to apply RLS based on the user's e-mail address that is logged into the Power BI web-app so that the data is restricted to the sales person in the record, and his/her management chain based on what was in AD.
[Sales Position]=USERNAME() || [BuckmanManagementChain.ManagementChain.1]=USERNAME() || [BuckmanManagementChain.ManagementChain.2]=USERNAME() || [BuckmanManagementChain.ManagementChain.3]=USERNAME() || [BuckmanManagementChain.ManagementChain.4]=USERNAME() || [BuckmanManagementChain.ManagementChain.5]=USERNAME() || [BuckmanManagementChain.ManagementChain.6]=USERNAME()
You could probably use the same approach to BW role authorization by importing it as a .csv file and joining it with your data.
Good luck!
Thanks for taking the time to explain your scenario Brysonds.
Seems a good idea but I'm afraid our BW roles are way more complex and even if we would use our AD data it wouldn't still be enough to cope with our distinct modules.
Anyway, thank you very much.
I think we will give up on this, and go for the RLS (double-work, double-maintenance).
br
Rúben