Dynamic Row Level Security in Power BI

Подписаться 49 тыс.

Просмотров 82 тыс.

50% 1

There are different methods to use row-level security in Power BI; You can set up Row Level Security in Power BI itself or through a live connection from a data source such as SSAS Tabular. However, row-level security defined in the ways mentioned in the articles above isn’t dynamic. By dynamic row-level security, I mean the definition of security is beside the user account information in the data source. For example, when John logs in to the system, based on data tables that show John is the sales manager for a specific branch, he should be able to see only those branches’ data. This method is possible in Power BI using DAX UserName() or UserPrincipalName() function. In this video, I’ll show you an example of dynamic row-level security with Power BI’s DAX USERPRINCIPALNAME() function.

Опубликовано:

7 окт 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 52

@Bvcggdert 8 месяцев назад

You seriously are awesome and Microsoft learning in Coursera directly references your material. Bravo!

@CU3RV008 8 месяцев назад

Thanks for putting this together, I just started working with PowerBi and this video helped me solve a big challenge.

@Milhouse77BS Год назад

Glad to see this update. Trying to use dynamic RLS here at my work.

@RADACAD Год назад

Thanks Donald

@jasoncalvert4065 10 месяцев назад

Thank you mate, good easy to understand example of dynamic RLS

@hossein3945 Год назад

That's solid Gold. Thank you Reza for sharing this.

@RADACAD Год назад

Thanks Hossein jan!

@lachuynh85 3 месяца назад

Thanks so much, your guidance is very clear and useful.

@RADACAD 3 месяца назад

Glad it was helpful!

@pthapa55 Год назад

Thanks for such a good post however I still have one question. Is the row level done in Power BI desktop or is it done after the report is published in the workspace? Or do we need to do it at both places? I am confused. Thanks

@RADACAD Год назад

You just do it once in the dataset, and all the reports connected to it will follow that rule.

@pthapa55 Год назад

@@RADACAD Thanks

@NutanPatel 2 месяца назад

we need to manually add the user under the members list of dataset. do we really require because we implemented dynamic RLS?

@donnacarter1602 2 месяца назад

This helped me so much, thank you for sharing!

@RADACAD 2 месяца назад

You're so welcome!

@ellanguyen5335 Год назад

Thank you for sharing this video. The guide is really details and I got it working! Thanks Reza

@RADACAD Год назад

Glad it helped!

@HARSHALK-s6m Год назад

Hi Reza, Can you please tell me how to implement RLS on embed power bi report on company portal or sharepoint?

@Najla-us6pz Год назад

@DuncanFairweather 4 месяца назад

You say if I am new to RLS, I should check out your earlier video about static rls but a search does not turn up any such video. Could you please supply a link?

@thejishubasak Год назад

Hello Reza. Thanks for simplifying RLS. I have one question. How do I make sure that when I am accessing the published report, I can atleast the the details personalized to me(like for example, welcome message and my profile picture)? It work fine if other users are accessing it, but when I access it, I see the image and name of the first user in the Employee Database

@laurarodas1511 Год назад

Hello Reza, thanks for your videos, you explain very well but I have a question, does Power Bi have double authentication for integrated dashboards? Can I double authenticate when I login? I need to implement more security levels for my clients and I don't know how to do it, thank you.

@RADACAD Год назад

Thanks :) If by double authenticate you mean multi-factor authentication, where you use mobile or a second mean to authenticate when you login, then yes. You can enable multi-factor authentication for the users in the Office 365 admin center.

@gokulsthev Год назад

Hi Reza, is it possible to build RLS when using live connection to power bi dataset, by importing a new excel sheet with roles and connecting to the live connection's model?

@noahhadro8213 Год назад

In the Power Bi Service does the RLS security get applied once meaning the queries are applied only once to reduce the model at the beginning of the session OR do the queries get run every time a visual loads or you go to a new page?

@abdulfiroz9 9 месяцев назад

Hi Raza, can you explain Dynamic RLS to be applied to change theme of power bi report as per user login?

@adityaprakash9151 8 месяцев назад

Hello sir, in a scenario I have a table of user with email id and country I want to apply row level security on my report that means user can reports of their belonging countries , but there is a problem I m facing where the data is present in that table country column is storing countries in conacanated form means India,Uk,Australia such please suggest

@scooby990 6 месяцев назад

Hi , how can I use dynamic RLS for some data and others. By location and region

@joserocha9400 Год назад

Hello Mr Reza, thank you for sharing this. I have an issue, if there is an user that have to has total access to the report besides the others users not, what to do? Thanks in advance!

@RADACAD Год назад

Hi. Jose I have explained it in my article here: radacad.com/dynamic-row-level-security-with-manager-level-access-in-power-bi

@kaustubhbandewar9815 Месяц назад

Hi Sir, I have one question, I have similar use case however, i have a table with many to many relationship. can RLS work in many to many set up ? here you are forming one to many relationship which is working for me. I have tried to create a bridge table with just the common column. but still it does not work

@RADACAD Месяц назад

I will have a video about that coming soon :)

@jrazafindrabe5229 9 месяцев назад

Hello, Why is it necessary to add email or email group in the published report. Isn`t it automatically recognized by the person who log-in.

@jackhillyer3397 2 месяца назад

to identify which records in the fact table get included by matching the keys from the chosen user in the security table

@muhammetmuslu4429 Год назад

Thank you for this good video

@ranjanroy1623 Год назад

Hi Reza, thanks for this video , it is amazing always . Do you have any video/ series/ blog on Power Bi embedding as well , if you can pls share the link

@RADACAD Год назад

Not yet, hopefully in the future

@Soulenergy31 Год назад

Thank you Guru! 8:24 - 11:00 share the RLS report with others

@EhsanRavana 11 месяцев назад

درود آقا رضا🎉

@1yyymmmddd 3 месяца назад

Didn't quite get why one should add "People or Groups who belong to this role" if you control access by username?

@scstudios8 6 дней назад

You can grant 1000 people direct rights to a report, they still will not be able to see anything until you assign the roles 1 at a time to all 1000 people. The ONLY way around this, is if you can have all your emails in an email group. This is not stressed enough. This is easy if your company has an email group with everyone in it. But if you have external emails, it doesnt matter what is in your table, you still need to find a way to stuff them into that an email group or you enter them 1 at a time. So the only way this helps at all is if you absolutely have an email group. if you dont, you are keying every one of them in somewhere. The only benefit is, you dont need to edit the report to create a role.

@anmfaisal964 11 месяцев назад

Hiw to use row level security for external email holders

@erinfield1943 2 месяца назад

3:38- static row level security 5:57- dynamic row level security

@praveenkumar_0143 Год назад

Well- Explained 👏👏

@RADACAD Год назад

Thank you 🙂

@bkd-newyork2256 Год назад

nice

@Charlie888 Год назад

@aamirbaig5236 Год назад

Hi Reza. I just checked and confirmed that office 365 group (Everyone) does not support in Row level Security I saw this on guy in the cube ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-oxYQ2GGefrs.html (exact time 3:22 ) Please confirm your understanding. Thanks a lot Very informative video on RSL.

@Lotaristo Год назад

It's not supported (read in official documentation)

@scstudios8 6 дней назад

Interesting, so you STILL need to add every single person to the dynamic function if you dont have an email group set up. That is retarded, but hey, its microsoft. You would think if you have a link that says, ANYONE with access to the link gets in, that would allow you to see something in the report - Nope. It doesnt matter if you grant direct access to people, they ALSO need to be granted to that function in the service. No clue what people at microsoft are doing... Obviously they dont know what they are doing either. So, with this, if you have some type of public site, you cant have an email group, so, you have to STILL add every person one at a time. So, this doesnt really help anything either.

@RADACAD 5 дней назад

Hi. I think what you need is different than RLS in a public website. by the way RLS won't work with a public sharing functions such as Publish To Web. You need to have some concept of users. So either embedded, or using Power BI/Fabric users. and then the security can be managed by AD or Office 365 groups, and not needed to be managed by individual users.