Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Next up in the FabCon + SQLCon recap series: The roadmap for Microsoft SQL and Maximizing Developer experiences in Fabric. All sessions are available on-demand after the live show. Register now

Reply
olejakobk
Frequent Visitor

Row level security with multiple roles

Hi everyone,

 

I have a on prem tabular SSAS model that I use through the gateway. There are two group of users:

  • Sales Managers are managers of salespersons. Dimension table is filtered so that they see all products, but limit salesperson.
  • Product Managers owns prodcuts. Dimension table is filtered so they can see all salespersons, but limit product.

Both these group of users have their own Power BI Dashaboard/Reports, security take hand of filtering the data to their field of interest.

 

The big question: How can this be solved if one user have both of these groups?

 

I was thinking I need some way of telling from the Power BI online report that the user is in this "role" now.

First thought was assigning SSAS roles in the connectionstring when creating report in Power BI Desktop. but it doesnt seem to work throught the Enterprise Gateway when published.

 

The alternative would be to have two models, each with its own security scheme activated.

 

Any thouhgts?

2 REPLIES 2
clausm73
Advocate II
Advocate II

I'm facing the same issue - and the RLS documentation is NOT addressing the situation where a user belongs to multiple Security Roles - and we want to restrict on a specific Security Role.

 

Using Excel its possible to modify the ConnectionString to the Cube / Workspace adding a parameter for the preferred Security Role.

 

"Roles=Sales Managers" or "Roles= Product Managers".

 

How can this be achieved using Power BI published reports in the cloud? Where can the report designer choose what Security Role is intended to use a certain report variant?

v-caliao-msft
Microsoft Employee
Microsoft Employee

@olejakobk,

 

First thought was assigning SSAS roles in the connectionstring when creating report in Power BI Desktop. but it doesnt seem to work throught the Enterprise Gateway when published.

We can use the role which design on tabular model, here is a document which describe this, please refer to the link below.
https://docs.microsoft.com/en-us/power-bi/desktop-tutorial-row-level-security-onprem-ssas-tabular

 

Regards,

Charlie Liao

Helpful resources

Announcements
New to Fabric survey Carousel

New to Fabric Survey

If you have recently started exploring Fabric, we'd love to hear how it's going. Your feedback can help with product improvements.

Power BI DataViz World Championships carousel

Power BI DataViz World Championships - June 2026

A new Power BI DataViz World Championship is coming this June! Don't miss out on submitting your entry.

Join our Fabric User Panel

Join our Fabric User Panel

Share feedback directly with Fabric product managers, participate in targeted research studies and influence the Fabric roadmap.

March Power BI Update Carousel

Power BI Community Update - March 2026

Check out the March 2026 Power BI update to learn about new features.