Unleash row level security patterns in Microsoft Power BI – Business Applications Summit
I was fortunate enough to be able to attend the Business Applications Summit in Seattle this year.
I had an incredible time, met a lot of people that I have looked up to, read their blogs and watched their video’s. As well as made some new friends.
One of the things that stood out for me was how easy it was to chat to the people from the Microsoft Power BI Team (where I am currently focused), they were so friendly and always willing to hear my questions and feedback. I plan on returning next year.
With that being said, I presented two sessions, with one being Unleash Row Level Security Patterns in Power BI (which I was asked to present at the last minute due to Reza Rad having issues coming to the United States). So below is a link to the video and I hope that I did Reza proud.
Here is the link to the video: Unleash row level security patterns in Microsoft Power BI
As always if there are any comments or suggestions please leave them in the comments below.
Hey Gilbert,
Excellent article and demo! Can RLS be used to anonymise data? For instance, if I have data from 3 companies and want to present a peer group analysis, I want a user from Company A to see data for Company A & rest is anonymised. Likewise for Company B and C. Is this possible?
Hi there, I think that this could possibly be done.
I might have to think a bit about it.
Do you have some sample data?
[…] Unleash row level security patterns in Microsoft Power BI – Business Applications Summit (@GilbertQue) […]
Hey Gilbert,
We have included 2 roles in our Power BI report 1) StandardUser 2) SuperUser.
Got a huge list of users from Active Directory instead of adding each member to the roles we have used NT Authority / Authenticated Users DL from Active Directory which will include each and every employee in the organization to both the roles. We want have kept some restrictions in StandardUser role and no restrictions for SuperUser role.
We are facing challenge here how can we give SuperUser access to leadership team from the NT Authority / Authenticated User DL from Active Directory using SuperUser role. When when the user logged in using SuperUser he should see everything but user who logins with Standarduser role sees only limited data.
Is there a way we can use DAX expression or technique to identify the User who logins check for SuperUser or Standarduser role with respective that it will show the data.
Regards,
Ravinder Sunkara
Hi there
It sounds like my blog post below is exactly what you are looking for. I would suggest instead of using NT Authority/Authenticated Users rather use “DomainName\Domain Users”
https://www.fourmoo.com/2018/02/20/dynamic-row-level-security-is-easy-with-active-directory-security-groups/
Please let me know how it goes
Hi Gilbert,
We want to avoid maintaining a list of AD user list or groups in a table instead we are using NT Authority/Authenticated Users. Could you please recommend the best solution or provide any other suggestions for the below scenario:
1) StandardUser role – Added NT Authority/Authenticated Users as member and some restrictions applied so standard users will see only their data but not other groups data as per the dax filters applied.
2) SuperUser role: Added some AD distro list groups as members who will have super access to see anything because there no filters applied for this role.
So when a user logins to the powerbi dashboard for example Americas\Sunkara logged in and I am superuser member so my member name listed in superuser role. So when I login it should show only Superuser role instead of StandardUser role. how can we achieve it using DAX script please let us know if there is any possibility.