How to set up a bulk and dynamic RLS permissions list?

[dcheng029]

Hi everyone,

I have a published Power BI dashboard that contains sensitive and confidential information that only a select cohort of staff within the business should have access too. 

Quick run down; two of the data sources that this dashboard uses is from "Salesforce Objects" where there are fields that define the 'Business Manager' and 'Business Owner' of each Job ID, example of each data source:

Job ID	Business Manager	Business Owner
123	Person 1	Person 2
456	Person 2	Person 3
789	Person 4	Person 5

I need to apply some form of security measure (I was initially thinking RLS) to restrict dashboard access to a dynamic list of staff dictated by the above mentioned Salesforce Objects data source.

I would expect the permissions list to update whenever the Salesforce Object data source updates with people movements. I have PBI Pro access but not PBI admin. Is the above possible at all?

[lbendlin · Accepted solution]

Maybe.  Dynamic RLS requires the presence of an email address that you can then compare against USERPRINCIPALNAME().  If your SFDC Objects data source can provide that list of email addresses then you can use that to control the dynamic RLS.

NOTE:  SFDC management chain changes are notoriously sluggish.  Make sure you don't accidentally expose data to users that have recently changed managers.

[dcheng029]

Hi @lbendlin thanks for the pointers, will check this out!

[v-aatheeque]

Hi @dcheng029 ,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others .
If you have any question relating to the current thread, please do let us know and we will try out best to help you.


Thank you.

[v-aatheeque]

Hi @dcheng029 ,

We haven’t heard back from you regarding our previous response and wanted to check if your issue has been resolved.

If it has, please consider clicking “Accept Answer” and “Yes” if you found the response helpful.
If you still have any questions or need further assistance, feel free to let us know — we're happy to help!

Thank you!

[v-aatheeque]

Hi @dcheng029 

If our response addressed by the community members is resolved for your query, please mark it as Accept Answer and click Yes if you found it helpful.

Should you have any further questions, feel free to reach out.
Thank you for being a part of the Microsoft Fabric Community Forum!