Hi all,
first post so deep breath!
We are running a module as SaaS in Azure and I've designed a Power BI report and published it to a test workspace, then provided a walkthrough for one of our customers before I drop the work into the team to prep it for production. The customer raised an understandable question, can we restrict visibility of the data to certain roles? As an overview, we use Identity Server 4, which supports whatever authenticator the customer wants to use, and they are capable of creating any number of "roles" that are needed. As the SaaS vendor, I don't know what they are, nor do I really want to care, they need to be able to create new roles and say these roles get to see data with codes 123, 456 & 789, the codes form a column in the report.
My question now is one of how do I dynamically support them creating roles in whatever their authenticator is and a set of codes that role has visibility to and then apply that role to the report, is there a method of passing the list of codes in from the page where the report is embedded and have RLS say (DAX like) Where code in (<array of codes>)? Or am I trying to explore the limit of what RLS can do?
<edit fix some layout & spelling>
Cheers
John
