I couldn't find a similar post, so I'll check my luck and ask you guys.
With the introduction to Object-Level Security, could there in any way be possible to set up a security that sort of is a mix of RLS and OLS?
Example we would really like to implement:
In a company/group there are business units. Lets say we want to set up a role for all the different Business Units.
We want all business units to see each others Net Sales, but they can only see their own business units Gross Profit. Is this possible?
Thanks for your ideas and thoughts!
Solved! Go to Solution.
Wouldn't that make sense, to atleast make a person only see specific rows and spesific columns in the same table?
I know my original question is a bit different, as I would like a person to see all rows, but only parts of a column. That it's not even possible to filter both rows and columns in the same table in the same time surprises me a bit.
Actually, that seems to work. Setting up an RLS-role, and adding an OLS column specific filter on that RLS-role works fine. The role can only see the intended rows and intended columns.
But ok, I guess my original question still remains a difficult task as of now..
Actaully OLS is not fully developed on Power BI Desktop, for now we are using External tools like Tabular Editor or XMLA endpoints to make RLS whereas RLS can be developed on Power BI dekstop.
Yeah, I'm using Tabular Editor for the OLS part. So I created an RLS role with a filter on a "Business Unit", and also set up "None" on a Gross Profit column. While viewing as that role, both RLS and OLS seems to be correct. But yes, this means that every combination of RLS and OLS relevant security would have to be set up, which is a bit painful..
I would definitely not cut and hack into the fact table to create dimensional measures or anything like that, the performance would degrade too much in my case. Unless there's any ideas that could work 😞
RLS and OLS cannot be combined on the same object.