cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Highlighted
Frequent Visitor

RLS Best Practice

Good afternoon, 

I am asking for an advice on what is the best approch concerning the RLS for a multi "Branch" scenario. 

Scenario: 

I have a model where there is a fact table and then there are other tables related to the fact tables with the Dimension. 

I have to set up a role where some users can see only some information of the fact table and the related dimension. 

In particular we have different Branches and one user must see only some information of the fact table and "some information" of the dimensions. The branch field is present in all the tables and used for creating the keys used among the tables.

 

Is it the best approach to create a role for each Branch? 

Is it the best approach create a table where the users are linked to the relative Branch and use this table to filter the roles? 

 

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Community Support
Community Support

Re: RLS Best Practice

Hi @thebigwhite ,

 

Try to create a model like this.

r3.PNG

Then create a role on the 'Branch table'.

r4.PNGr5.PNGr6.PNG

 

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

2 REPLIES 2
Highlighted
Super User V
Super User V

Re: RLS Best Practice

It's not just the creation of the roles that you need to think about. You also need to think about the rules for each role, and to which table(s) to apply these rules.

 

Ideally you have an RLS reference table that sits at the top of the hierarchy (outermost shell of star/snowflake). In that case you may be able to apply the rules just to this one table, and then the data model can do the rest of the work.

 

Worst case you have to apply the rules to every single table. Not cool.

Highlighted
Community Support
Community Support

Re: RLS Best Practice

Hi @thebigwhite ,

 

Try to create a model like this.

r3.PNG

Then create a role on the 'Branch table'.

r4.PNGr5.PNGr6.PNG

 

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

Helpful resources

Announcements

August Community Highlights

Check out a full recap of the month!

August 2020 CYST Challenge

Check out the winners of the recent 'Can You Solve These?' community challenge!

Experience what’s next for Power BI

Join us for an in-depth look at the new Power BI features and capabilities at the free Microsoft Business Applications Launch Event.

Top Solution Authors
Top Kudoed Authors