Forum Discussion

stanteitelbaum's avatar
stanteitelbaum
Regular Visitor
1 year ago
Solved

is column level security really available in sql server 2019

hi ricardo explained at https://community.fabric.microsoft.com/t5/Service/rls-and-pbi-the-engine-and-ssas/m-p/4689806#M275450 that ols (to me that means column level also) is available not only in pb...
Need Help
  • v-sathmakuri's avatar
    v-sathmakuri
    1 year ago

    Hi stanteitelbaum ,

     

    SQL Server does not support true Column-Level Security (OLS) natively only Row-Level Security (RLS) is supported. OLS can be simulated using views and SYSTEM_USER(), but this approach is manual and not secure for sensitive data unless combined with other controls.

    Power BI does not detect SQL column restrictions via USERPRINCIPALNAME() unless you are using Direct Query.

    SQL enforces security using views and SYSTEM_USER() or SUSER_SNAME().

    To ensure safer, scalable security that aligns with Power BI’s behaviour, split sensitive data into separate tables and apply RLS.

     

    Thank you!!

  • stanteitelbaum's avatar
    stanteitelbaum
    Regular Visitor
    1 year ago

    thx sai, forgot to mention i saw masking and encryption but i dont think they would be possible solutions to our problem.   costs are summed depending on the filters chosen and i suspect we'll decide not to show their aggregation or a measure eg margin) that uses them if even 1 rls or cls restriction was encountered in the rollup this executive asked for.