Implement Raw Level Security

Microsoft Power BI can help us to secure reports and workspaces by allowing us to share them to active directory users and groups. We can also share a single report but have users see different data according to their job role.


We can configure raw level security by two method 

1. Static Method

2. Dynamic Method

1. Configure row-level security with the static method

The static method in row-level security (RLS) uses a fixed value in the DAX filter, while the dynamic method uses a DAX function.

RLS involves several configuration steps, which should be completed in the following order:

  1. Create a report in Microsoft Power BI Desktop.

    1. Import the data.

    2. Confirm the data model between both tables.

    3. Create the report visuals.

  2. Create RLS roles in Power BI Desktop by using DAX.

  3. Test the roles in Power BI Desktop.

  4. Deploy the report to Microsoft Power BI service.

  5. Add members to the role in Power BI service.

  6. Test the roles in Power BI service.

2. Configure row-level security with the dynamic method

We can set up row-level security only once, without the need to continue maintaining it dynamically. Instead of the fixed string,  this uses a DAX function in the row-level security filter.

  • The USERPRINCIPALNAME() function will tell you the username of the person who is signed in to Power BI service.
  • Both Power BI Desktop and Power BI service test RLS by using different security roles


Comments

Popular posts from this blog

Use DAX iterator functions in Power BI Desktop models

Different charts in Power BI

Modify DAX filter context in Power BI Desktop models