Forum Discussion
How to set up a bulk and dynamic RLS permissions list?
Hi everyone,
I have a published Power BI dashboard that contains sensitive and confidential information that only a select cohort of staff within the business should have access too.
Quick run down; two of the data sources that this dashboard uses is from "Salesforce Objects" where there are fields that define the 'Business Manager' and 'Business Owner' of each Job ID, example of each data source:
| Job ID | Business Manager | Business Owner |
| 123 | Person 1 | Person 2 |
| 456 | Person 2 | Person 3 |
| 789 | Person 4 | Person 5 |
I need to apply some form of security measure (I was initially thinking RLS) to restrict dashboard access to a dynamic list of staff dictated by the above mentioned Salesforce Objects data source.
I would expect the permissions list to update whenever the Salesforce Object data source updates with people movements. I have PBI Pro access but not PBI admin. Is the above possible at all?
Maybe. Dynamic RLS requires the presence of an email address that you can then compare against USERPRINCIPALNAME(). If your SFDC Objects data source can provide that list of email addresses then you can use that to control the dynamic RLS.
NOTE: SFDC management chain changes are notoriously sluggish. Make sure you don't accidentally expose data to users that have recently changed managers.
5 Replies
Maybe. Dynamic RLS requires the presence of an email address that you can then compare against USERPRINCIPALNAME(). If your SFDC Objects data source can provide that list of email addresses then you can use that to control the dynamic RLS.
NOTE: SFDC management chain changes are notoriously sluggish. Make sure you don't accidentally expose data to users that have recently changed managers.
Hi dcheng029 ,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others .
If you have any question relating to the current thread, please do let us know and we will try out best to help you.
Thank you.
