cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
olejakobk Frequent Visitor
Frequent Visitor

Row level security with multiple roles

Hi everyone,

 

I have a on prem tabular SSAS model that I use through the gateway. There are two group of users:

  • Sales Managers are managers of salespersons. Dimension table is filtered so that they see all products, but limit salesperson.
  • Product Managers owns prodcuts. Dimension table is filtered so they can see all salespersons, but limit product.

Both these group of users have their own Power BI Dashaboard/Reports, security take hand of filtering the data to their field of interest.

 

The big question: How can this be solved if one user have both of these groups?

 

I was thinking I need some way of telling from the Power BI online report that the user is in this "role" now.

First thought was assigning SSAS roles in the connectionstring when creating report in Power BI Desktop. but it doesnt seem to work throught the Enterprise Gateway when published.

 

The alternative would be to have two models, each with its own security scheme activated.

 

Any thouhgts?

2 REPLIES 2
Moderator v-caliao-msft
Moderator

Re: Row level security with multiple roles

@olejakobk,

 

First thought was assigning SSAS roles in the connectionstring when creating report in Power BI Desktop. but it doesnt seem to work throught the Enterprise Gateway when published.

We can use the role which design on tabular model, here is a document which describe this, please refer to the link below.
https://docs.microsoft.com/en-us/power-bi/desktop-tutorial-row-level-security-onprem-ssas-tabular

 

Regards,

Charlie Liao

Highlighted
clausm73 Frequent Visitor
Frequent Visitor

Re: Row level security with multiple roles

I'm facing the same issue - and the RLS documentation is NOT addressing the situation where a user belongs to multiple Security Roles - and we want to restrict on a specific Security Role.

 

Using Excel its possible to modify the ConnectionString to the Cube / Workspace adding a parameter for the preferred Security Role.

 

"Roles=Sales Managers" or "Roles= Product Managers".

 

How can this be achieved using Power BI published reports in the cloud? Where can the report designer choose what Security Role is intended to use a certain report variant?

Helpful resources

Announcements
Exclusive LIVE Community Event #3 – Ask Arun Anything

Exclusive LIVE Community Event #3 – Ask Arun Anything

Join us in the third Triple A event!

Meet the 2020 Season 1 Power BI Super Users!

Meet the 2020 Season 1 Power BI Super Users!

It’s the start of a new Super User season! Learn all about the new Super Users and brand-new tiered recognition system.

Super User Challenge: Can You Solve These?

Super User Challenge: Can You Solve These?

We're celebrating the start of the New Super User season with our first ever Super User 'Can You Solve These?' challenge.

Power BI Desktop Update - February 2020

Power BI Desktop Update - February 2020

We are super excited for our update this month, as we are releasing two of our top community requests!

Power Platform Online Conference

Power Platform Online Conference

Join us for the first ever Power Platform Online Conference!

Top Solution Authors