Checking out the new Power BI RLS Editor

Take a look at the new Row-Level Security (RLS) editor within Power BI Desktop! Patrick explores how it works and what to look out for in the Preview.

Power BI February 2023 Feature Summary

Documentation


*******************

Want to take your Power BI skills to the next level? We have training courses available to help you with your journey.


*******************
LET'S CONNECT!
*******************


***Gear***

#PowerBI #RLS #GuyInACube

[scobob]

This is an awesome addition! I have been looking for a solution to this use case in conjunction with RLS for a long time. We have an application that generates a 1:M access for RLS and works great. However, there is a cost associated with the user licensing for the app. The executives responsible for the respective portfolios never use the app itself but rather the output and analytics from that app. In the past we needed to provision a license to the app in order to provide the required access. This solves that problem! To your point, there is probably a less static and more sustainable solution to, for lack of a better term, hard-code it in the service but this opens up a tremendous opportunity for me. Thank you! Made my day.

[MultiMarcoy]

Any tips to embedding Power BI Report to SharePoint site with RLS?

[stinaintx]

Awesome. I use RLS so sales people only see their commission sales and not everyone else’s.

[martymcfly]

For larger groups where you won't have auto access to email (or email won't match user principal name) you can create a spreadsheet that contains what they are allowed to see. The country would be a single field and you'd have to list each country separated by something, I use semicolon ";". In power Query, split the country column into rows and create a many to many relationship from your excel table to your sales table. Then in the Dax, the security says you can only see rows of the new table based on user principal name. It is still manual compared to other the other solution, but you can keep it in a secure folder location and updating security is as easy as updating a line in excel. The draw back is the user has to wait until the next refresh cycle for the changes to take place.

[lalalf]

I need to use RLS, but I want to show max, min and median without RLS. Can I turn off RLS for some measures? Thank you

[timgray]

Great video.

Apologies for unrelated:

Video request for your users: Field Parameters.

Use case:
Set up a field parameter with multiple measures, with an additional field grouping measures together. Use this on a matrix visual with an associated filter with these fields to allow users to choose which columns to include; this allows a ton of measures to be available to the user, with the benefit of only having the ones they want (as well as better performance). In addition, you can use field parameters to allow the user to include/exclude different drill down options (with bookmarks allowing multiple field parameter groups to change the order of the drill downs).

My experience comes from business users wanting Excel like experience in the form of Matrixes. Utilizing field parameters in this way has been very beneficial to their experience.

I'm happy to expand on this comment, just let me know.

[JeffTavares-vlsl]

Great example and explanation ... this was exactly what I was looking for. THANK YOU!

[jessejamespoland]

@GuyInACube Do you have any idea how to merge a live connected Power BI report to a Power BI dataset into one pbix file in import mode?

[noob]

How would you go about testing Dynamic RLS for multiple reports that share a dataset? The PBI Service GUI no longer allows you to "Test as..." for each report that is connected to a data model now.

[luankim]

This is awesome! What if I wanna see the data of "United States" in International as well?

[tperera]

@guyinacube after you publish to the service and you are in the security section for that dataset and you've already added the user to the RLS role, is there a reason you chose to switch to a different user to show they had the correct access instead of using the test role option that comes up when you click the three dots That appear when you hover over the role name i.e Domestic

[spen]

If i was another user (MrSmith) and connected to the report, would I see both International and Domestic? Is the default to block all others? AND - Thanks for sharing 💥💥💥💥

[emnataalouch]

this was exactly what I was looking for. thanks !😄

[williamwood]

I have a need to make dynamic RLS based upon Azure AD group memberships. But to do that I need to have a dataflow that calls the AD Graph API, bringing the various groups im using and their associated members, and to do that I need to have an app registration between Power BI and Azure AD to use Graph API data as a data source. It turns something seemingly straight forward into something overly complicated. 😢

[barnabastoth]

Hi there,
Do you have a hint how to overcome RLS topology restrictions of limited relationships?
Having a dim table (RLS applied on it) in the remote model that filters a fact table in the local model: RLS is applied as expected, except for totals are visible, because there are not filters applied there. I was thinking about rewriting the measures adding a constant filter from that table with CALCULATE, but probably there are better approaches :)

[beyondtruthandlies]

Patrick you have not yet helped me in one of the matrix issue. How should I control the total and subtotal values for a hierarchy? I have posted it in community but it seems no one is that smart enough to crack it down.

[rishabhjain]

I want to add 100 RLS to Power BI, is there any quick method to do that, or I just need to type in one by one? Can we post this idea to MS Power BI Team, to bulk upload RLS from excel to Power BI?

[BootleggedBatman]

@guyinacube I wonder if we can use report parameters as the value in the dax expression

[hius]

Fortunately my row level security doesn't prevent me from watching Patrick's videos! #iwatchpatrick

[Bharath_PBI]

Gui is for basic or for simple rules, MS PBI team, this feature is like more dev time and less impact for users.