Forum Discussion
Power BI Role Base Access
Hello guys,
I hope you are well !!
I need your help on this.
So, I have five users. A, B, C, D, and E. Each user will have access to the Power BI report but will only see his/her data. This is enforced by RBAC policies based on user principles.
If a user goes on leave, as a manager, I will decide who on the list should review User A's report. For example, if User A is on leave, I will decide User B to take over his work and also User A's work. In simple words, User B will have access to User B's Data and also User A's Data in the Power BI report. After the work is done, I will remove the access, and the things are BAU.
Initially, I thought of creating a Security group for each user and add/remove users so, this requirement can be met.
But, what if the users count increases, and so the security groups. I think it's waste of resources.
Is there any other efficient way, where the manager can add and remove users easily to meed the above requirement?
Thanks heaps
Hi Pker_Tank , Could you try these steps
Create an Access Table: Set up a table with User ID , Manager ID , and Assigned User columns for easy access management.
Implement Dynamic RLS: Use DAX to dynamically control access, allowing managers to view their data and others' based on assignments.
This will make manager role easier
If this post helped please do give a kudos and accept this as a solution
Thanks In Advance
Hi Pker_Tank ,
-
User Access Table Approach
- Store user emails and role mappings in a dedicated table.
- Use DAX filters to dynamically control data access.
- Allows managers to modify access without IT involvement.
-
Implementation Steps
- Create a User Access Table with User Email, Role, and Assigned Data.
- Apply RLS filters using LOOKUPVALUE() or USERPRINCIPALNAME().
- Ensure access updates dynamically without modifying security groups.
-
6 Replies
Hi Pker_Tank , Could you try these steps
Create an Access Table: Set up a table with User ID , Manager ID , and Assigned User columns for easy access management.
Implement Dynamic RLS: Use DAX to dynamically control access, allowing managers to view their data and others' based on assignments.
This will make manager role easier
If this post helped please do give a kudos and accept this as a solution
Thanks In Advance
Hi Pker_Tank,
Thank you for reaching out to Microsoft fabric community forum! Akash_Varuna has provided a great suggestion on using a User Access Table for managing Row-Level Security (RLS). I would like to add a few words.
Instead of managing multiple security groups, you can use a User Access Table to dynamically control access. This approach allows managers to assign temporary access without IT intervention.
If this helps, then please Accept it as a solution and dropping a "Kudos" so other members can find it more easily.
Thank you.Hi Pker_Tank,
I hope this information is helpful. Please let me know if you have any further questions or if you'd like to discuss this further. If this answers your question, please Accept it as a solution and give it a 'Kudos' so others can find it easily.
Thank you.
Hi Pker_Tank,
May I ask if you have resolved this issue? If so, please mark the helpful reply and accept it as the solution. This will be helpful for other community members who have similar problems to solve it faster.
Thank you.
Hi Pker_Tank ,
-
User Access Table Approach
- Store user emails and role mappings in a dedicated table.
- Use DAX filters to dynamically control data access.
- Allows managers to modify access without IT involvement.
-
Implementation Steps
- Create a User Access Table with User Email, Role, and Assigned Data.
- Apply RLS filters using LOOKUPVALUE() or USERPRINCIPALNAME().
- Ensure access updates dynamically without modifying security groups.
-
Hi Pker_Tank,
I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions. If my response has addressed your query, please accept it as a solution and give a 'Kudos' so other members can easily find it.
Thank you.
