Shared datasets, different RLS

[tjalleph]

Hi all,

I'm hoping you can help me with a little issue. 

We'd like to create different reports from one single datamodel. Maintenance would be easy if we could do this from one single shared dataset. 

However, the different reports will need to have different RLS, e.g.

1. employee - only sees their own worked hours

2. project - all project members can see all project members worked hours

3. business - selected managers can see all numbers from their business

So far I've not seen a solution that would allow us to have just one shared dataset, that we could update from a single .pbix. 

Are there easy work-arounds? 

[v-angzheng-msft]

Hi, @tjalleph 

To create 3 different data sets for the three different reports would be a workaround.

Currently, RLS set for one shared dataset will take effect for all the related reports.  It is not supported to set more than one security access for one shared dataset in Power BI currently.

While your demand is a good idea, it is not supported to implement in Power BI currently.

you can vote up idea in  Idea Forum , and if it is not there, then you could post it, add your comments there to improve Power BI and make this feature coming sooner.

Best Regards,
Community Support Team _ Zeon Zheng

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[tjalleph]

Thanks for the information Stuart. 

However, I probably wasn;t complete in my question.

RLS for any one of these reports is not the issue. I can get that to work. The three types of RLS (employee, project, business) are not hierarchically organized. Therefore, I need to create 3 different data sets for the three different reports.

I'm hoping there is a way I can create and maintain only one dataset/model and have three reports with different RLS using this dataset.   

[Burningsuit]

Hi @tjalleph 

Provided you have the security details you need in the dataset this can be done with RLS.

with RLS you have access to the users login name - via USERPRINCIPALNAME() in DAX, so you have to ensure that appears in your dataset. For the first example, this means that each row that contains Worked Hours can be filtered -either by a dimension or directly on that row, by the username.

It depends on your Datamodel how the data can be filtered by username.

Reza Rad has a good blog on this, see: Dynamic Row Level Security with Organizational Hierarchy Power BI - RADACAD

You need to understand how your data is filtered, and what DAX can do in the RLS filtering, but it can be done.

Hope this helps

Stuart