Create a dataset subset based on roles

[Anonymous]

Hi and thank you in advance.

Currently, I have a datamart that contains two types of data: personal and financial. Person data may be shared across the various divisions, however the division may only see their financial information. What I'd like to do is create subsets of the datamart by role (where role defines a division). The subsets would then move to each divisions workspace. For example, a person in role A should see all the personal information across the company and only the financial information for division A, but a person would not see the any financial information in divisions B or C. The subset will then be moved into workspace A where everyone with role A can see and use the data. 

Is what I'm envisioning possible? If so, how would I do it. 

Thank you.

Owen

[Anonymous]

Hi  @Anonymous ,

Row-level security (RLS) is the ability to restrict data for given users within Power BI. Row-level security (RLS) works by creating roles and selecting what data they can see, then assigned specific users to these roles.

Please note: for RLS to work, the users must be in the 'Viewer' role at the workspace level. If they are Admin, Member or Contributor, they will be able to see all the data.

If you are an external user, you can see the following link:

Solved: RLS for External guest users - Microsoft Power BI Community

This is the related document, you can view this content:

Row-level security (RLS) with Power BI - Power BI | Microsoft Learn

Power BI Row Level Security and Dynamic RLS | by David Ding | Analytics Vidhya | Medium

Dynamic Row level security for multiple column val... - Microsoft Power BI Community

Best Regards,

Liu Yang

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[Anonymous]

Hi Liu Yang,

The problem we're encountering is that when RLS is implemented RLS only works at the 'Viewer" role. We need those with the appropriate access to use that data to create, save, and share those views from their restricted financial domain to others with a 'viewer' desgination. So someone in financial domain A needs access to the data to build reports for other members in domain A. People in domain B or C should not see what A has created. 

[lbendlin]

You seem to be describing RLS - Row Level Security .  Have you looked into that?