cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
captainlaw Member
Member

RLS with UserName()

Hello Community, 

 

I have two tables, Table A (state, population) Table B (username, state).

Is there a way to setup RLS using username() to reference Table B(username) column to return the value of Table B(state) and join the data to Table A(state)?

 

On a separate but related question - Is there a way to assign a Parameter using UserName()?

 

Your help is much appreciated.

1 ACCEPTED SOLUTION

Accepted Solutions
Super User
Super User

Re: RLS with UserName()

Hi there, you can most certainly do this.

 

I would suggest reading my blog post, which just gives some explanations around when deploying to the Power BI Service and what to look out for.

 

https://gqbi.wordpress.com/2016/10/03/power-bi-dynamic-row-level-security-things-you-need-to-know-to...

 

And then here is a great blog post by Kasper De Jonge, in which he gives a working example how to get RLS working. And also provides a sample PBIX file. 

 

http://www.kasperonbi.com/power-bi-desktop-dynamic-security-cheat-sheet/ 



Did I answer your question? Mark my post as a solution!

"Proud to be a Datanaut!"
5 REPLIES 5
Super User
Super User

Re: RLS with UserName()

Hi there, you can most certainly do this.

 

I would suggest reading my blog post, which just gives some explanations around when deploying to the Power BI Service and what to look out for.

 

https://gqbi.wordpress.com/2016/10/03/power-bi-dynamic-row-level-security-things-you-need-to-know-to...

 

And then here is a great blog post by Kasper De Jonge, in which he gives a working example how to get RLS working. And also provides a sample PBIX file. 

 

http://www.kasperonbi.com/power-bi-desktop-dynamic-security-cheat-sheet/ 



Did I answer your question? Mark my post as a solution!

"Proud to be a Datanaut!"
captainlaw Member
Member

Re: RLS with UserName()

BTW, how come there's not a way to assign username() function within a parameter?  If there's a way, I could restrict data at the import layer instead of at filtering layer to improve performance.

 

Any idea?

Super User
Super User

Re: RLS with UserName()

Hi there,

 

That is a by design feature and in order for RLS to work correctly, you always have to have the entire dataset. 

 

This ensures that if you have a user who needs access to everything this can be achieved. 

This also ensures that dynamic RLS can be achieved without having to re-create not only the charts but also the dataset.

 

If I understand you correctly you would want to only bring in the data for the specific user?

If that is the case you would then have to have a specific dataset per user, which would increase the size of each individual model.

 

By keeping all the data in one model and leveraging RLS ensures that the data is complete and consistent across the different users.



Did I answer your question? Mark my post as a solution!

"Proud to be a Datanaut!"
captainlaw Member
Member

Re: RLS with UserName()

You addressed my concern perfectly.  Thank you once again!

yogevz Regular Visitor
Regular Visitor

Re: RLS with UserName()

Hi

why i don't have (on the join) the option for “Apply security filter in both directions”...?

attach pictureno security join.png