Test Row Level Security with each of multiple reports sharing a dataset in a premium workspace
I have a dataset which draws data from many Excel workbooks which are all saved on sharepoint (we are moving toward having direct access from Power Query - in Excel or PBI, to DWs on our systems, but that's another story). I then use that same dataset for several other reports. In the service where these reports and the dataset are saved to a premium workspace it is possible to test the RLS. However, I have no choice as to which report the RLS is tested with and no way of changing from whatever report the service seems to decide it wants to use to test with to another report. I can probably delete the reports I don't want to test from the workspace so that testing defaults to use the only report there, but, that seems unsatisfactory. Is there a better way?User IP Address Row Level Security
Hi all, I have a situation where I want to restrict what a user (sales rep) sees based on a site location. For example, if the user logs on from home or Site A, they see all sales; if they log on from Site B, they only see their sales. It's a case where the user is being mentored into a management role, but when at Site B, they don't want prying eyes (open office) to notice that they have more access than everyone else. I was wondering if I could somehow get the IP address where they are logged on, and I could restrict what they see. Any ideas? Thanks Steve
Row Level Security: Default Role Assignment
I attempted to use Row Level Security (RLS) for the first time, walked through the MS post i found. I set up the roles, and then applied the rules/filtering to those roles, and it was easy. I then published the report and went into the workspace in the pbi service, and performed the testing function for Security settings, and they worked like a charm... however, then i started getting pinged by users whom i had shared the direct link to the report with, that when they attempted to access the report they were blocked. My assumption was that existing security would not change, and that I would go into the security settings within the service and add users to the roles i had set up under RLS so that just those users would have the rules tied to the roles applied only to them, leaving everyone else that had been given the link unaffected... what actually happened was the exact opposite, that everyone was locked out, and i appear to have to now go in one by one and assign everyone a role?!?! Am I understanding that correctly, because that sounds really upsidedown... the majority of users to whom I have given permission should remain unchanged (without any restrictions applied from any roles i set up in the dataset using RLS), and I should be able to apply the restrictive filtering X role only to the small handful of people that need to be restricted. Is there a way to do this currently? If not, it sure would be nice if that could be set up.
Manage Security Roles - Row Level Security summary figures
Hi all, My dashboard shows sales and call figures for by postcode, territory, region and national levels. I have assigned Sales reps who can only view sales and calls by their territory, whilsts Regional Sales reps can view sales and calls by their region and the split by territory whilst a select group can view all sales and calls by each region and territory. Is there a way where the Sales rep can still only view their territory but can see the total for their region and the total national figure, and the same for Regional sales reps, can they view their full region breakdown but also the national roll up? The purpose is so that each viewer can see how they are comparing to 1. National Figures and 2. Their Region. Thank you in advance!!
Dynamic RLS with multiple tables
Hi there. I have a reasonably complicated dynamic RLS which i am trying to resolve through dax. Attached is the schema. The premise is the Id in the user table is the USERRPINCIPALNAME The user has a a list of companies they are allowed access to in the USERALLOWED table These companies have a relevant ID called InstanceId-CRMId that gets passed into a site list and on to the report to limit the data. The issue i am haivng is i do not want to have to use bidirectional relationships There iaremany to many relationships Performance is poor I cannot seem to get the RLS to properly work and the sites table isnt filtering when I add ID = USERPRINCIALNAME() in the user table. Can someone suggest specifc dax for this use case please??? I have looked at some RADACAD posts on this example but can't work it out. Thanks in advance!!
