How to authorize user in Power BI Report and Daskboard

[thuantv]

Dear Everyone

I have a dashboard and report that is used for 34 Properties. There are many different people will use this report.

And the security requirement is that Manager in Property 1 can not allow to see the number in report and data of Property B.

Each property have about 10 person need to use this Report who belong to different cost center. And the head of deparment 01 can not allow to see the number and data of department 02.

My question is how can I authorize user by Property and by Cost center.

Thanks and Regards,

Thuan Van Tang

[V-pazhen-msft]

@thuantv 

I don't see how is your data look like but generally you are able to assign data access using RLS. Something like this: 
https://docs.microsoft.com/en-us/power-bi/service-admin-rls 



Best,
Paul

[thuantv]

Dear pazhen

My solution is use :Userprincipal funtion to define the user login file in User table.

And, Use switch(true(),..) in managing role.

With this, can maintain very quickly for more than 500 people with one dax funtion in managing role in term of individual segement and multipul segment.

[mitsu]

Hi , 

You  must create RLS on the Power BI model . Essentially creates roles by property and assign users to these roles based on your requirement . The Roles can be created in the PBI desktop . FOllowing link should help . 

https://docs.microsoft.com/en-us/power-bi/service-admin-rls

Thanks,

Mitsu

[thuantv]

Dear Mitsu

I have tried with row-level securtiy,

It already work in case each person only see each segment.

How can i authorize for one user who can view many segment or all segment.

For example: Email: thuantv can see HTL01 and HTL10

This is my Dax in Row level security in which user1 is measure = 

USERPRINCIPALNAME()

[Property] = Switch(true(),
'Authorization user'[User_1]="thuantv@vingroup.net","HTL01",
'Authorization user'[User_1]="cuongtt4@vingroup.net","HTL02",
'Authorization user'[User_1]="lamnt31@vingroup.net","HTL03",
'Authorization user'[User_1]="congntk1@vingroup.net","HTL04",
'Authorization user'[User_1]="longdh5@vingroup.net","HTL05",
'Authorization user'[User_1]="hungnq20@vinpearl.net","HTL06",
'Authorization user'[User_1]="thanhnt102@vingroup.net","HTL07",
'Authorization user'[User_1]="thonhc@vingroup.net","HTL08",
'Authorization user'[User_1]="ktt@vingroup.net","HTL09",
'Authorization user'[User_1]="halt32@vingroup.net","HTL10",
'Authorization user'[User_1]="anhnt216@vingroup.net","HTL08",
""
)