Dynamic RLS for Org structure

[Anonymous]

Hi Everyone,

I am trying to create a report with RLS applied for my organisation. Example structure is Division, Branch, Section. So the manger of a Division should be able to see data for all Branches and Sections under that Division. But Branch manager should only be able to see data for that Branch and the Section manager should be able to see Section data only. I looked at building a hierachy with the path. But I am struggling with my scenario. Any advise/help will be appraciated.

[Icey · Accepted solution]

Hi @Anonymous ,

Please check if these posts could help you: 

Dynamic Row Level Security with Organizational Hierarchy Power BI,

Dynamic Row Level Security in Power BI with Organizational Hierarchy and Multiple Positions in Many-to-Many Relationship – Part 1.

Best regards

Icey

If this post helps, then consider Accepting it as the solution to help other members find it faster.

[Syndicate_Admin]

hey @hewavij  did it work?

[Syndicate_Admin · Accepted solution]

Hi @hewavij ,

Please check if these posts could help you: 

Dynamic Row Level Security with Organizational Hierarchy Power BI,

Dynamic Row Level Security in Power BI with Organizational Hierarchy and Multiple Positions in Many-....

Best regards

Icey

If this post helps, then consider Accepting it as the solution to help other members find it faster.

[Icey · Accepted solution]

Hi @Anonymous ,

Please check if these posts could help you: 

Dynamic Row Level Security with Organizational Hierarchy Power BI,

Dynamic Row Level Security in Power BI with Organizational Hierarchy and Multiple Positions in Many-to-Many Relationship – Part 1.

Best regards

Icey

If this post helps, then consider Accepting it as the solution to help other members find it faster.

[StefanoGrimaldi]

hey @Anonymous  did it work?

[StefanoGrimaldi]

on power bi desktop when setting the roles you should be able to spacify multiple varues for one user ( you need a column in each table that works as a filter control for the data) :

basically you can set for each table a column filter to allow or not data to be seeing by that role, 

so you by giving a role a value null for example for that column wont be able to see the data on it, if you using a department id column for example you can do multiple rows to specify in each row each posible value the role have access to: 

them in your power bi service you set up to wicth account each role its assigned, you could create a adress security group and add the users to it and assign the role to that users group, so anytime you add or delete someone from it the permits of those role get assigned without getting in power bi service to configure. 

hope this its of help,

if this solve your consult please accept as solution, so others can find it if usefull, 

thanks. 

[Anonymous]

Thanks Stefano, I will try your idea.