cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Vegard1985
Helper I
Helper I

A mix between RLS and OLS?

Hi,

 

I couldn't find a similar post, so I'll check my luck and ask you guys.

With the introduction to Object-Level Security, could there in any way be possible to set up a security that sort of is a mix of RLS and OLS?

 

Example we would really like to implement:

In a company/group there are business units. Lets say we want to set up a role for all the different Business Units.

We want all business units to see each others Net Sales, but they can only see their own business units Gross Profit. Is this possible?

 

Thanks for your ideas and thoughts!

1 ACCEPTED SOLUTION

@Vegard1985 , 

 

Yes, that's a bit painful. Unfortunatley, for now I don't think we have other options here. 





If this helps, Appreciate your KUDOS!
Did I answer your question? Mark my post as a solution!


Proud to be a Super User!




View solution in original post

6 REPLIES 6
Vegard1985
Helper I
Helper I

Ah, really?

Wouldn't that make sense, to atleast make a person only see specific rows and spesific columns in the same table?

 

I know my original question is a bit different, as I would like a person to see all rows, but only parts of a column.  That it's not even possible to filter both rows and columns in the same table in the same time surprises me a bit.

 

Edit:

Actually, that seems to work. Setting up an RLS-role, and adding an OLS column specific filter on that RLS-role works fine. The role can only see the intended rows and intended columns.

 

But ok, I guess my original question still remains a difficult task as of now..

@Vegard1985 , 

 

Actaully OLS is not fully developed on Power BI Desktop, for now we are using External tools like Tabular Editor or XMLA endpoints to make RLS whereas RLS can be developed on Power BI dekstop. 





If this helps, Appreciate your KUDOS!
Did I answer your question? Mark my post as a solution!


Proud to be a Super User!




Yeah, I'm using Tabular Editor for the OLS part. So I created an RLS role with a filter on a "Business Unit", and also set up "None" on a Gross Profit column. While viewing as that role, both RLS and OLS seems to be correct. But yes, this means that every combination of RLS and OLS relevant security would have to be set up, which is a bit painful.. 

 

I would definitely not cut and hack into the fact table to create dimensional measures or anything like that, the performance would degrade too much in my case. Unless there's any ideas that could work 😞

@Vegard1985 , 

 

Yes, that's a bit painful. Unfortunatley, for now I don't think we have other options here. 





If this helps, Appreciate your KUDOS!
Did I answer your question? Mark my post as a solution!


Proud to be a Super User!




View solution in original post

manikumar34
Solution Sage
Solution Sage

@Vegard1985 , 

 

RLS and OLS cannot be combined on the same object.

https://docs.microsoft.com/en-us/analysis-services/tabular-models/object-level-security?view=asallpr...

 

 





If this helps, Appreciate your KUDOS!
Did I answer your question? Mark my post as a solution!


Proud to be a Super User!




amitchandak
Super User
Super User

@Vegard1985 , As far as I remember, both do not work on the same object.

Did I answer your question? Mark my post as a solution! Appreciate your Kudos!! !!
Dashboard of My Blogs !! Connect on Linkedin
Want To Learn Power BI
Learn Power BI Beginners !! Advance Power BI Concepts !! Power BI For Tableau User !! Learn Power BI in Hindi !!
Proud to be a Super User!

Helpful resources

Announcements
Power BI December 2021 Update_carousel 768x460.jpg

Check it Out!

Click here to read more about the December 2021 Updates!

Jan 2022 Dev Camp 768x460 copy.png

Power BI Dev Camp- January 27th, 2022

Mark your calendars and join us for our next Power BI Dev Camp!

UG GA Amplification 768x460.png

Launching new user group features

Learn how to create your own user groups today!

Top Solution Authors
Top Kudoed Authors