Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Earn the coveted Fabric Analytics Engineer certification. 100% off your exam for a limited time only!

Reply
LDevi86
Frequent Visitor

Dynamic Row Level Security for the live connection with SSAS Tabular Model

Hi All,

I am implementing the Dynamic Row Level Security for the power bi users, which is live connection with SSAS tabular model.

 

I gone through the below steps:

1. I have created a table with the Users.

EmployeeIDSalesTerritoryIDFirstNameLastNameUserName
11User1AXXXX\User1
28User2BXXXX\User2
39User3CXXXX\User3
47User4DXXXX\User4
511USer5EXXXX\User5

2. Crated roles in SSAS  and added users to  membership.

And below picture for reference.

img 3 modelling.PNG

3. Used below DAX query to apply Dynamic RLS

 

=DimSalesTerritory[SalesTerritoryKey]=LOOKUPVALUE(DimUserSecurity[SalesTerritoryID], DimUserSecurity[UserName], USERNAME(), DimUserSecurity[SalesTerritoryID], DimSalesTerritory[SalesTerritoryKey])

RLS dynamic.PNG

4. Shared Power Bi report to the Users(Local AD users).

5. User can not able to see the content (User could see the blank visuals).

img1.PNG

6. It is working for the Static RLS.

Given the DAX : =DimSalesTerritory[SalesTerritoryKey]=2

img2.PNG

 

For more information I have On-Prem SSAS, Local AD users and live connection with the Power BI.

what would be the reason for this. If any suggestions , it would be appriciated.Thanks in Advance. 

 

Thanks,

Lakshmi

1 ACCEPTED SOLUTION
6 REPLIES 6
sultanan3
Frequent Visitor

Hi Lakshmi, I also have same porblem, Row level security is not working. In my case viewers can see all countries, I wonder if you get the solution so I can implement that way. Thank you

NS

lbendlin
Super User
Super User

USERNAME() behaves differently on Desktop and Service. Always use USERPRINCIPALNAME() and always use email addresses, not domain accounts.

Thanks for the reply. 

I have changed the table and DAX query as below using UPN.

UPN.PNG

And DAX :

=DimSalesTerritory[SalesTerritoryKey]=LOOKUPVALUE(DimUserSecurity[SalesTerritoryID], DimUserSecurity[UserName], USERPRINCIPALNAME(), DimUserSecurity[SalesTerritoryID], DimSalesTerritory[SalesTerritoryKey])

 

But the result is same, User could see blank report.

Do I should change the DAX query? any other settings to fix it?

 

Thanks,

Lakshmi

In power bi create a RLS role and for the DimUserSecurity table specif the rule

 

[Username]=USERPRINCIPALNAME()

Hi Ibendlin,

 

I am unable to implement RLS in Power BI desktop, since this is live connection with SSAS Tabular Model.

 

 

RLS1.PNG

 

Thanks,

Lakshmi

 

Helpful resources

Announcements
April AMA free

Microsoft Fabric AMA Livestream

Join us Tuesday, April 09, 9:00 – 10:00 AM PST for a live, expert-led Q&A session on all things Microsoft Fabric!

March Fabric Community Update

Fabric Community Update - March 2024

Find out what's new and trending in the Fabric Community.