Using RLS with Dynamics CRM Online

[PowerBI001]

Has anyone managed to achieve this using USERNAME() and RLS (Row Level Security).
I've been trying for a number of hours now and it just doesn't seem to work.

[Classboat]

Did you notice that it would work if you share the report with others? Maybe you are the owner of the dataset. But I will find out more details tomorrow. I have tested it. You can test it with sharing with colleagues.

Regards,
Classboat

[PowerBI001]

This is exactly what I've done.  

Created a dataset with 2 records in Power BI desktop directly:

This is the DAX statement I’ve got setup

And configured Security for the dataset, add me and another user

But when I view the data in www.app.powerbi.com I see both records.  I should see the 1 record corresponding to my email address.

If I test using ‘Test as role’ it works as I expect and shows just my record.

[v-jiascu-msft]

Hi @PowerBI001,

Did you notice that it would work if you share the report with others? Maybe you are the owner of the dataset. But I will find out more details tomorrow. I have tested it. You can test it with sharing with colleagues.

Best Regards!

Dale

[PowerBI001]

Hi, @v-jiascu-msft,

I have no other users to share it with currently, I'm trialling whether this works, and then I will buy a subscription.

Could you test whether the owner of the dataset is unable to view the data with RLS applied?

Thanks

[v-jiascu-msft · Accepted solution]

Hi @PowerBI001 ,

RLS wouldn't work on the owner of the dataset. Because the owner can edit both the dataset and reports. RLS aims at controlling the data access rather than something like filtering. You can run "Test as role" to see the effect.

According to my test, RLS works as expected. 

 

Best Regards!

Dale

[PowerBI001]

Thanks @v-jiascu-msft.  I can confirm this is the case with my testing also. 🙂

[v-jiascu-msft]

Hi @PowerBI001,

Did you get any error messages? Could you please post some snapshots?

I did it following the steps below. It worked.

1. Create reports and RLS roles in the Desktop. (RLS roles only can be created in the Desktop)

if(userprincipalname()="xxxx@xxx.com",[id] = "A")

2. Publish the report to the Service.

3. Click the ellipses, Security, assign the role to users. Or test the role.

Best Regards!

Dale

[chethan]

@PowerBI001

Use RLS is easy 

Identify the Row to filter based on the data 

[EmpID] = "Value" && [EmpID] = "Value"

[EmpID] = "123" && [EmpName] = "ABC"

& Cross check in View as Roles.

Upload the file in service & assign the User or Group

Regards,

Chetan K

https://www.urbanpro.com/chetank

[PowerBI001]

Has anyone managed to achieve this using USERNAME() and RLS (Row Level Security).

I've been trying for a number of hours now and it just doesn't seem to work.