Forum Discussion

Kevdie11's avatar
Kevdie11
Frequent Visitor
4 years ago

Row Level Security

I created Roles within Power Bi Desktop. When I test them within Desktop they work as expected.   After I publish the report, I set up security as one should. When I "Test as Role", the RLS works a...
General Comment
Need Help
edhans's avatar
edhans
Community Champion
4 years ago

I would have to see more to understand what exactly isn't working, but I would remove the user from the workspace entirely and only add them as a viewer to the App for the workspace. 

  • Kevdie11's avatar
    Kevdie11
    Frequent Visitor
    4 years ago

    So here is my data model.

     

    All we basically did was create a role for every Salesperson, and then we want to link every Salesperson's Email address to the respective roles on Power Bi Online. I.e. They should only be able to see Sales data pertaining to them.

    Let me give you an example:

     

    I create a role for "Online" Salesperson

     

     

    Here you can see the user's access to the workspace

    Here you will see I have added Richard to the role

    Here I am testing the role (Now viewing as: Online) You'll notice that I can only see data for Online.

     

     

    But, when I change it to view as "Richard Stevens" (who is allocated to the Online Role ONLY), then I can see all data.

     

    Thanks in advance

     

     

    • edhans's avatar
      edhans
      Community Champion
      4 years ago

      Get rid of both the Sales Person master and Customer Grouping master. Merge those into Customer master. Sales Person and Groupings are just additional attributes.

      I am not sure what Customer Created is, but don't relate that to Sales Fact table. Never relate fact tables together.

      Finally, get rid of the Bi-Di relationship between Customer Master and Sales Fact Table. Should be 1 to many.

       

      You have model ambiguity. For example, Customer Master directly filters Customer Created. But It can also filter Sales Fact Table which in turn filters Customer Created. so there are two ways for data to get filtered and you cannot control what path the model uses. 

      Then try RLS.