Row-Level Security and Object-Level Security together in Power BI??? Yup!

Struggling with using Row-Level Security (RLS) together with Object-Level Security (OLS) in Power BI? You think it can't be done? Think again! Patrick shows you how to use both together.


*******************

Want to take your Power BI skills to the next level? We have training courses available to help you with your journey.


*******************
LET'S CONNECT!
*******************


***Gear***

#PowerBI #RLS #GuyInACube

[idonjohnson]

Instead of creating separate pages, you can put the restricted columns in a field parameter and use the field(s) to link to a UPN.

[patoboyle]

In addition to rls and ols, they really need page level security.

[willempelser]

The problem with the page navigation - which not a lot of people know, due to how excel etc works, is that in Power BI, you can actually have multiple pages with the exact same name.

[harryleboeuf]

Aside RLS RLI would be interesting to. We use RLI as Row Level Intelligence. In our case Sales people are allowed to sales of the colleagues, they can see all details except customer names if it are not customers from their region. In a database this is quite easy to solve with a table valued function, but once in a cube this is quite difficult, we don't want a separate table with customer names per viewer-region. That would solve the tick, but we have 50K customers and 63 regions ....

[adriangonzales]

Hi, can I develop a report with OLS without Tabular Editor?

[unitc]

Great video, so useful to see the John doe authenticated perspective 👍

[anand]

is there any way to hide those visuals with ugly cross mark when ocl gets applied without page navigation?

[Markizoniusz]

Too bad there isn’t a better way to manage restricted columns/tables rather than this navigation. However, big kudos for showing the case that navigation trick is not secure. Makes sense but I didn’t realize it 😅

[hulltl]

Old would be good if they provide an option to return a default value rather than not show at all. Ie where not permitted return 0 or. Null. Would make it useful

[ashleyfiore]

How do we manage RLS for different reports connected to the same dataset?

[heddyjazy]

hello, how can I can give permission to a user to see only a specific pages in a reporting!!

[prasadplk]

How to add row level security in power bi pagenated report...

[analystdnash]

I have this dashboard I am doing RLS on, it is working fine in the pbi Desktop but not on PBI Server. I have given access to the users on the pbi server and added the users to the roles but still when I do Test Role as one of the emails, I cannot see any data/charts. Can I get assistance on this.

[MattiaRepossi]

With Dynamic RLS I solve many problems. But in these days i'm thinking is it possibile to create a "SuperUser" that can bypass all RLS and can view all?

[JFancke]

Is there any way to allow a role to see all rows in one column, but only a subset of rows in another column? For example a site manager can see headcount for all sites (eg for at least 1 column in the table they can see all rows) but they can only see the "payroll" column for certain rows (eg where site = their site). I think it's only possible if you split up the table.

[bryon]

Found a bug where if your table has a date format embedded in the table, OLS will throw an error when you try to save your security configuration in Tabular Editor... I put in a PBI Support ticket and through messing with different tables landed on the fact that date format creates hidden tables (I think for Time Intelligence) which OLS does not like. Hopefully, this can be fixed in a future update.

[roberttyler]

what happens if you have300 or so employees? is it scalable

[littlesunshine]

Hello.
I have a two column- comments and created by that contains text values
I want to filter only those comments who entered by some specific user that belong to AD group. (This group has SharePoint access permission as members) I am checking by their name manually but I want some solution to filter the name only if user name is belong to that group.
So that if new user come
it should check automatically.

Please reply if you can suggest or anyone in this chat.
My datasource is SharePoint.

[vpenywise]

I have a complex dashboard, with multiple pages and they utilize at least 3 or 4 different "slicer sources". For example, I have 3 different filters, on 3 different pages, for "Supervisor", coming from 3 different data sets. When I implement Role-Level Security, it literally destroys my whole Dashboard's data accuracy, because it applies a SINGLE "slicer filter" to ALL pages. How can I fix that? Thanks!

[helloranjan]

This is one of the complex problem in PBI