Forum Discussion

vbis's avatar
vbis
Helper I
4 years ago

Power BI | dataset permissions as per RLS setup

Hello.

I have created a global dashboard and i have provided access to the countries users' based on their email account (dynamic RLS-read only).

Some of the countries want to get access to the dataset as well but from what i checked they get full access to the dataset (they see the global view when they should see only the country they are supposed to see). 

Is there any way i can make this work?

Thank you,

Valia 

 

Need Help

2 Replies

  • v-janeyg-msft's avatar
    v-janeyg-msft
    Community Support
    4 years ago

    Hi, vbis 

     

    If set correctly, each country will only see data for its own country. Please describe your approach in detail, or provide a sample file so that we can see what went wrong.

     

    You can refer to this tutorial:

    Row-level security (RLS) with Power BI - Power BI | Microsoft Docs

    Did I answer your question? Please mark my reply as solution. Thank you very much.
    If not, please feel free to ask me.

    Best Regards,
    Community Support Team _ Janey

    • vbis's avatar
      vbis
      Helper I
      4 years ago

      Hello. 

      I have created a table (permissions) in my dashboard with 3 columns. Country, Mail, Group Access where under Group Access 0 is restricted only to the country and 1 is full/global access. 

      I have created a bidirectional relationship between the country of my permissions table and my consumption table (this is the table presenting all data). 

      Under Modeling -> Manage Roles i created a permisisions role with the below dax expression:

      IF(
      MAXX(
      FILTER ('Permissions', 'Permissions'[Mail] = userprincipalname () ) ,
      'Permissions'[Group Access] ) = 0 ,
      'Permissions'[Mail] = userprincipalname () ,
      1=1
      )

      Finally in the service under security i added all mails.

      I made some checks and people can view the level of info based on their email, however if i give access to the dataset they see everething. 

       

      So, to conclude, some people with restricted access (can view only their country) have asked me to provide to them access to the dataset.

      Is there any way i can provide them access to the dataset and see only their country?

      Thank you