Forum Discussion
XMLA end point and row level security (RLS)
Hi, Is it possible to manage row level security in power BI service using XMLA end point with SSMS or something similar? I would like to create our amend roles, add or remove users etc Thanks
Thanks.
Managing RLS is very manual in the PBI service and is not helpful in our organisation which has over 30000 employees. If you can recommend anything that would be great.
Thanks
Managing RLS is very manual in the PBI service and is not helpful in our organisation which has over 30000 employees. If you can recommend anything that would be great.
Thanks
Hi there
There is Dynamic RLS in which you can define a single role and the RLS is applied dynamically where you can do it via AD Security Groups
Here is my blog post on how to achieve this: https://www.fourmoo.com/2018/02/20/dynamic-row-level-security-is-easy-with-active-directory-security-groups/
There is Dynamic RLS in which you can define a single role and the RLS is applied dynamically where you can do it via AD Security Groups
Here is my blog post on how to achieve this: https://www.fourmoo.com/2018/02/20/dynamic-row-level-security-is-easy-with-active-directory-security-groups/
I have already implemented Dynamic RLS where possible, but in most cases it is not a feasible solution. Simply because it requires a data set to be refreshed. It is not possible to refresh the dataset everytime we add a new user to the dataset.
Nishant
- Hi there
That is by design as far as I know.
I would also set the expectation with the business that new users will be added once a day, when you can refresh the dataset? I appreciate that this is by design.
I was hoping for more of an automated solution to manage users.
I have looked into using SSMS 18.0 and AMO but neither seems to be allowing me to manage roles. I hope there will be something in the near future to automated RLS. Given that the team is focusing on bringing new features specially for large Enterprises, I am surprised that this hasn't been look at.
Thanks for your help GilbertQ
- Hi there
If you do use AD Security groups you can have it all automated, but as always with any technology you will have to get the data updated in order to get new changes applied.