RLS for individuals

[vanessafvg]

I need to create a model that has a variety of agents accessing it -  each should only see there own data - to set them up using row level security do I create a role for each user, and then add the users email to each of those roles? is that the best way to do it?

[Seth_C_Bauer · Accepted solution]

@vanessafvg It sounds like you want to use Dynamic RLS. This method allows you to use a dynamic way to filter data within the model. Really high level, it requires you to build a mapping table with the user info and what they will be filtered by. Here are a couple links that will get you headed in the right direction, but essentially this method calls for 1 role, and DAX is used to recognize the user and filter the model accordingly.

This example is for a full tabular model build, but is relevant to the Desktop

And this example by Reza Rad show a simple implementation using the Desktop

and a final tips portion from @GilbertQ can be found here

[catalind86]

Thank you @Seth_C_Bauer

Can you please let us know if we can implement Dynamic RLS for On-premises Power BI Report Service?

Thank you in advance.

[Seth_C_Bauer]

@catalind86 Yes, RLS will work in PBI Report Server

[vanessafvg]

great info thanks.