Dynamic Row Level Security in Power BI
Вставка
- Опубліковано 10 лют 2025
- There are different methods to use row-level security in Power BI; You can set up Row Level Security in Power BI itself or through a live connection from a data source such as SSAS Tabular. However, row-level security defined in the ways mentioned in the articles above isn’t dynamic. By dynamic row-level security, I mean the definition of security is beside the user account information in the data source. For example, when John logs in to the system, based on data tables that show John is the sales manager for a specific branch, he should be able to see only those branches’ data. This method is possible in Power BI using DAX UserName() or UserPrincipalName() function. In this video, I’ll show you an example of dynamic row-level security with Power BI’s DAX USERPRINCIPALNAME() function.
You seriously are awesome and Microsoft learning in Coursera directly references your material. Bravo!
Thanks for putting this together, I just started working with PowerBi and this video helped me solve a big challenge.
Glad to see this update. Trying to use dynamic RLS here at my work.
Thanks Donald
Thank you mate, good easy to understand example of dynamic RLS
That's solid Gold. Thank you Reza for sharing this.
Thanks Hossein jan!
clear explanation, thank youu
You are welcome!
Thanks so much, your guidance is very clear and useful.
Glad it was helpful!
Thank you for sharing this video. The guide is really details and I got it working! Thanks Reza
Glad it helped!
This helped me so much, thank you for sharing!
You're so welcome!
Well- Explained 👏👏
Thank you 🙂
Thank you for this good video
In the Power Bi Service does the RLS security get applied once meaning the queries are applied only once to reduce the model at the beginning of the session OR do the queries get run every time a visual loads or you go to a new page?
Hi Reza,
Can you please tell me how to implement RLS on embed power bi report on company portal or sharepoint?
+1
درود آقا رضا🎉
Hi Reza, is it possible to build RLS when using live connection to power bi dataset, by importing a new excel sheet with roles and connecting to the live connection's model?
we need to manually add the user under the members list of dataset. do we really require because we implemented dynamic RLS?
3:38- static row level security
5:57- dynamic row level security
Hello sir, in a scenario I have a table of user with email id and country I want to apply row level security on my report that means user can reports of their belonging countries , but there is a problem I m facing where the data is present in that table country column is storing countries in conacanated form means India,Uk,Australia such please suggest
Thank you Guru!
8:24 - 11:00 share the RLS report with others
Hi Raza, can you explain Dynamic RLS to be applied to change theme of power bi report as per user login?
Thanks for such a good post however I still have one question. Is the row level done in Power BI desktop or is it done after the report is published in the workspace? Or do we need to do it at both places? I am confused. Thanks
You just do it once in the dataset, and all the reports connected to it will follow that rule.
@@RADACAD Thanks
You say if I am new to RLS, I should check out your earlier video about static rls but a search does not turn up any such video. Could you please supply a link?
Hello Reza. Thanks for simplifying RLS. I have one question. How do I make sure that when I am accessing the published report, I can atleast the the details personalized to me(like for example, welcome message and my profile picture)? It work fine if other users are accessing it, but when I access it, I see the image and name of the first user in the Employee Database
Hi , how can I use dynamic RLS for some data and others.
By location and region
Hello Reza, thanks for your videos, you explain very well but I have a question, does Power Bi have double authentication for integrated dashboards? Can I double authenticate when I login? I need to implement more security levels for my clients and I don't know how to do it, thank you.
Thanks :)
If by double authenticate you mean multi-factor authentication, where you use mobile or a second mean to authenticate when you login, then yes. You can enable multi-factor authentication for the users in the Office 365 admin center.
Hello Mr Reza, thank you for sharing this. I have an issue, if there is an user that have to has total access to the report besides the others users not, what to do? Thanks in advance!
Hi. Jose
I have explained it in my article here: radacad.com/dynamic-row-level-security-with-manager-level-access-in-power-bi
Hi Sir, I have one question, I have similar use case however, i have a table with many to many relationship. can RLS work in many to many set up ? here you are forming one to many relationship which is working for me.
I have tried to create a bridge table with just the common column. but still it does not work
I will have a video about that coming soon :)
Hi Reza, thanks for this video , it is amazing always .
Do you have any video/ series/ blog on Power Bi embedding as well , if you can pls share the link
Not yet, hopefully in the future
Yes but how we hide the card visual ?
It was only for demonstration purposes. You don't need to add the card.
what happens if I do not add the user to the row-level security group?
then they will not see anything
Didn't quite get why one should add "People or Groups who belong to this role" if you control access by username?
You can grant 1000 people direct rights to a report, they still will not be able to see anything until you assign the roles 1 at a time to all 1000 people. The ONLY way around this, is if you can have all your emails in an email group. This is not stressed enough. This is easy if your company has an email group with everyone in it. But if you have external emails, it doesnt matter what is in your table, you still need to find a way to stuff them into that an email group or you enter them 1 at a time. So the only way this helps at all is if you absolutely have an email group. if you dont, you are keying every one of them in somewhere. The only benefit is, you dont need to edit the report to create a role.
Hello, Why is it necessary to add email or email group in the published report. Isn`t it automatically recognized by the person who log-in.
to identify which records in the fact table get included by matching the keys from the chosen user in the security table
Hiw to use row level security for external email holders
nice
Hi Reza. I just checked and confirmed that office 365 group (Everyone) does not support in Row level Security I saw this on guy in the cube ua-cam.com/video/oxYQ2GGefrs/v-deo.html (exact time 3:22 ) Please confirm your understanding. Thanks a lot Very informative video on RSL.
It's not supported (read in official documentation)
Interesting, so you STILL need to add every single person to the dynamic function if you dont have an email group set up. That is retarded, but hey, its microsoft. You would think if you have a link that says, ANYONE with access to the link gets in, that would allow you to see something in the report - Nope. It doesnt matter if you grant direct access to people, they ALSO need to be granted to that function in the service. No clue what people at microsoft are doing... Obviously they dont know what they are doing either. So, with this, if you have some type of public site, you cant have an email group, so, you have to STILL add every person one at a time. So, this doesnt really help anything either.
Hi. I think what you need is different than RLS in a public website. by the way RLS won't work with a public sharing functions such as Publish To Web. You need to have some concept of users. So either embedded, or using Power BI/Fabric users. and then the security can be managed by AD or Office 365 groups, and not needed to be managed by individual users.