How to use DYNAMIC ROW-LEVEL-SECURITY (RLS) in Power BI // Beginners Guide to Power BI in 2021
HTML-код
- Опубликовано: 26 июл 2024
- Get Demo Files here
ko-fi.com/s/af4d3c5a27
In this video we cover how you can use dynamic row-level-security in order to make your life easier when it comes to maintaining multiple reports and multiple permissions in Power BI.
-
🚩 Support us to get perks such as demo files, early access and more!
/ solutionsabroad
MY FAVOURITE POWER BI BOOKS
📕 The Definitive Guide to DAX - amzn.to/3ruYs2f
📗 DAX Patterns - amzn.to/3oVgOYs
MY GEAR
🎥 Canon 4000D DSLR Camera - amzn.to/3tCqDOw
💻 Cyberpower Wyvern PC - amzn.to/3q04QOw
🪑 Infamous Gaming Chair - amzn.to/3q3iUXw
💡 LED Studio Lighting - amzn.to/3q3ftQz
🎙 Lavalier Microphone - amzn.to/3jwKutG
📺 Monitor - amzn.to/2LuHhhO
GET IN TOUCH
📺 Website - www.solutionsabroad.co.uk
📧 Email me - fernan@solutionsabroad.co.uk
🤵 LinkedIn - / solutionsabroad
📘 Facebook - / solutionsabroad
📸 Instagram - / solutions_abroad
🐤 Twitter - / abroadsolutions
🤖 Reddit - / fernanespejo
🌍 WHO IS SOLUTIONS ABROAD
Hi, my name is Fernan, the one-man band of Solutions Abroad. I work as a Data Scientist based in London, UK and have over 6 years of experience working in Business Intelligence. Solutions Abroad these days is dedicated to teaching the ins and outs of Power BI, through the power of RUclips.
If you want to learn more, I’ve conveniently created playlists to help you find the right topic for you.
🐎 First, watch this video about how a typical Power BI workflow looks like
• Power BI from START to...
🗺 Learn DAX to extend your Power BI calculations
• Power BI DAX Basics OLD
📆 Stay up-to-date on all the features Power BI releases monthly
• Power BI Monthly Featu...
🧪 Get certified as a Microsoft Data Analyst Associate
• Power BI DA 100 Prepar...
💡 Learn Power BI Features to improve your dashboards
• Power BI Feature Highl...
📊 WHAT IS POWER BI?
Power BI is a business analytics tool by Microsoft. It creates a working environment suited for normal users, meaning tasks such as data extraction, cleansing, analysis and storytelling; these are made easily-accessible to citizen-users, and extendable for technical users. At face value it provides visually-stunning, interactive dashboards, but it’s built on top of so much more.
🔻 Get started with Power BI Desktop for FREE
powerbi.microsoft.com/en-us/d...
#PowerBI #DataAnalytics #BusinessIntelligence
I watched this video to understand RLS and especially about if someone got the dataset will the RLS still apply as you showed at the end, and literally the VERY NEXT DAY my boss asked this exact question. Thanks man, you made me look good
Covered all questions i had after reading the microsoft articles, you're a life saver, thanks !
Again Thanks Fernand!
2:37 region table linked to emails
6:55 USER principal
8:17 publish it in PBI web service
8:51 see as others... Go to the data set!!!!!!!!!!
9:28 Sharing the report with John
Great Video. Sorted out all questions we had on RLS in one go.
Really nice. All the details are covered. Nice pace and good example.
Thank you Fernan - Very clearly explained. I've applied your lesson to my real life work scenario and it worked 1st time! Brilliant!
This video is too good to understand and implement the RLS feature both in the Power BI desktop and online Power BI service account. Thanks a lot.
You're welcome, thanks for watching!
Thank you Fernan, I was havening problem with RLS after publishing what was pending was de Securit configuration on power bi service. You saved my day!
This was a very good explanation. Thank you for taking the time to do this.
Great video about RLS. Beautifully and simple. It really gave me, what I needed about this.
Thanks Lars!
Fernan, you are awesome mate !! Super clear and precise. Great Job.
Thank you !!! This is what I needed !!!!
Thx you ! I was looking for this exact feature. The fact that the dataset published will keep the RLS configuration is super interesting !
Great video, thanks for the help!
You make look everything so easy and understandable.
I really emjoy your videos! They are very helpful, thanks so much!
Amazing video! Thank you
Amazingly explained
Great Video
Thanks Bro, Your tutorial saved me :)
Great explanation thx
great stuff
thanks so much for this video, really helped me!
Thanks bro for creating such a knowledge video Helped me a lot to apply RLS
Superb explanation, Fernan! You are an amazing teacher ❤
Great. Helped me a lot.Thanks.
You're welcome!
Thank you! Super clear!
Glad it helped!
Clearly explained; Thank you Fernan
Properly demonstrated
You are the best!
Great video and very helpful. Can we use rls and pls together using this procedure?
Thank you very much! It was a very useful video, a quick question. When publishing the report do you always have to add the users in the “Security” section of the dataset or is there a way to automate that? Thank a lot in advance :)
Thanks for the details session. I have tried it but i am getting error on the power BI web service where it says "unable to load model". Whats the preferred relationship between the main data table and table contained email addresses?
Thanks for this. Am I correct in assuming that user who we have provided dataset access will be able to refresh the dataset and visuals on the report with RSL applied?
Hej fernan. Very nice video. i have followed all the steps but not found Apply security filter in both direction in modelling. i changed cross filter direction to both . now i am seeing that it filters first table(Permission table) but not those other tables.
This is fantastic! Thank you so much! Question: can I combine static and dynamic RLS? I need to give some users access to everything so I’d like to just create a permission called “all” and assign them individually and then just have dynamic table for everyone else.
Good video.
However, It's still based on offline data model.
How would you do it for the AAD users on large scalable datasets..?
Superb. I really love this but what if my data source is a Cube/Tabular Model
If one user is applied to all region, what will you do? Do you need to declare per line entry the region? Thanks
Thats a great video!! Can you please cover page level security...
Hi Chandra, there's currently no built-in way to deal with page security, but there are a few workarounds, I'll try to cover it in a video!
@@SolutionsAbroad Thanks
Hi Fernan, thanks for the great content. I need to set RLS on multiple criteria. Like Region and Product. How can I do that?
Hi Sheik, I believe you'll need to create a product table in between region and user data, like in 2:47 then follow all the steps
Thanks Farnan for your reply. It Means, for every added criteria an additional table is required, right?
Thanks for sharing the video. Instead of email addresses, is it possible to use AD Account names instead and UserName(). For some reason, this works for me locally but when deployed to the service it does not work
Hi Jeff, that's because the USERPRINCIPALNAME when in the service, recognises their login to the service i.e. their email address. One way I addressed it in the past is to create a mapping table with IT with the email address and the AD account names. Hope that helps!
Excuse me, why did you checked the boxes for both “other user” and the RSL rule when testing on desktop?
My RSL only works if I do that exact thing (checking both “other user” and the RSL but not in web
NIce video.. Thank you! My question is why should we manually assign members to the role on the service (at 9:40 on the video) if it's a dynamic RLS? If it 's a big group should we manually enter all names?
Hey Ernst, its dynamic because we define who is logged in based outside of the RLS, but for this to work we need to first assign roles to those people for this first bit to work. For this case I would suggest using a Distribution Group including everyone in your business, to avoid having to put all the names manually
@@SolutionsAbroad thank you !! 👍i think the distribution group is the best approach. Keep up the good work . 👏
is it possible that the user may able to see the KPIs but not the table with detailed data?
Can we automate updating the roles in Power BI service? Or, it’s always to be updated each time when we add/delete anything in the permission table?
That would be my quesion too =)
Can anyone assist me? We have RLS per Group. We have a card visual with the group name. How do you get your visual to change (based on rls group) to show a short to long group name in the card? Or do you have an alternative solution?
Thanks for this great video.
How can I add multiple users/emails to view the same region's data? For example, if I want to add Bob to view what John can view.
Hi Joanna, in this case you'll need to add both Bob and John to have access to the same region
Thanks for reply!
I found my issue was due to relationships.
Can this RLS apply to desktop usage? If I don't wish to publish to the web.
Thank you so much for this wonderful channel,
I'm working with PowerBI Report Server, I have implemented Row-Level-Security and created one role on which every employee shall be assigned. However, I have over 200 users using the reports. Is there a way to automatically assign every email adress of the users to this single role?
Hi there, you'll have to manage this outside of Power BI to make it easier for you, something like this: ruclips.net/video/N3XWKSVoRCQ/видео.html
please make a video visual hiding for example :we have 3 visual ,user A can access 2 visuals, User B having access 1 visual , User C having all visuals ,if you do this it will help me a lot
The email you have usen there are your own email or you have written manually....
What if someone logins from an Email which is not present in the Permissions table, some other user from the organization. Will Dynamic RLS still work ? or will that user be able to view the full report ?
Hi Fernan, thanks for the video and mabuhay from Manila. I have a question regarding the bi-directional cross-filtering:
Can we substitute it with visual-level filters or is setting bi-directional cross-filtering a must to enable effective dynamic RLS? I'm just a little bit worried because bi-directional cross-filtering has been frowned upon by many experts that I watch and follow, especially SQLBI and GIAC. Thanks!
what if I say like I have 6 managers and each have their own assigned business line, region, customers, item code? How can I set that up?
I followed the same steps but when i am applying the email ID it changing the measure count.
e.g. Department A, Department B = total value is 1000, but when i am applying against email same these two departments changing 1000 to some other value
.what is that issue?
Hi guys the problem I am having is the username or principal name on power bi server needs an @ to register the data otherwise its blank. however on my network we assign permission via domain\myname so how would it work then?
How I can get the dataset ?
Thank you for sharing and how can I create access for different users on different pages? please support
Hi there, thanks for watching! Currently there's no way to separate different users access per page, a workaround could potentially be that you create a separate report with individual pages. You can use Shared Datasets to ensure you have one single data for all your reports, i covered it here: ruclips.net/video/xDgyDXyu6FQ/видео.html
Thank you for swift reply and I will check the link
Why did you create an extra "Region" Table in the Data Model? Can we not directly attach User Data with Permissions Table on "Region"? It will create a Many-to-Many relation, true but it would work, no? Basically what I am asking is what's wrong in many-to-many relation in such a scenario?
How this works if we have another column country/city level access restrictions
Please make a video on power bi paramter
Thanks for watching, here's the video for parameters ruclips.net/video/28PDdA3SROU/видео.html
Is anyone know when am checking one user the error show like Couldn't load the data for this visual
The query encountered security filters on a table relationship that cannot be reconciled for the current user. Please contact your administrator or developer to review role memberships and security definitions.
Please try again later or contact support. If you contact support, please provide these details.
When I test this from Test As Role, I can see data is being filtered however, when I land on the report, I see all the data, it's not filtered. Tried from the App, shared link for the report as well, it's not filtering. How do you properly test this that it's actually working rather than this method?
Hi, if you're the dataset owner, RLS wont be applied for you, to test it properly you either have to:
- Use another Power BI account to test
- the "View As" role in Power BI Desktop
@@SolutionsAbroad Thanks, also just found the other person should not be part of workspace, in short s/he has to be just viewer/consumer of that report! It's a bit gray instruction from MS but logically right, why rls if I already have full dataset access! Haha!
@@etherlords88 I did have the same problem and it was because of this
Why are you checking BOTH the "other user" box and the "permissions" box when trying to view as in powerBi desktop?
I have 4 page report
For Admin person or for the company for which I need to show report, I want to show all 4 pages with every data
But there are investors in this company and from 4 pages 1 page is for Investor report so whenever any investor do login then that person should see only single page not others and just their data only
This needs to be embed in company website or application.
Not able to achieve from 1 month, can you guys help on this, that will be to most achievable solution for me than
Hello - i am following these steps but my data isn't filtering, i cant figure what i am doing wrong?
Hi Amrita, dont forget to change your cross filtering to both
AND
tick the box for security filters, if your permissions table filters but not your other tables, this is the reason.
Hope that helps!
@@SolutionsAbroad hello thank you for replying, I do have the cross filter but it’s not giving me the option to tick the security box.
@@AmritaOSullivan are you on the latest version of Power BI? It should be there as an option
@@SolutionsAbroad hi yes I have may 2021 version.
The text you showed in video is blur. It would be helpful to provide a better resolution.
how do we create the utc time query in power bi @solutions Abroad
Hi Rakesh,
There are different ways you can do this, for power query you can use DateTime.SwitchZone,or for DAX you can use UTCNOW.
If you want something easier and report-wide, you might want tp consider changing the locale of your Power BI Desktop
Hope that helps!
Hi Fernan can you please tell me how can I insert a row in a Power BI Table by merging two or more columns, the sample is given below where "New Merged Column" is the one that I want to add by merging all columns A, B, C and D:
Column A Column B Column C Column D
Approved HC Actual Hiring Retirement December
------------------------------------------------------------------------------------
New Merged Column
Is the "Now viewing as" in the power BI service based on users account or role?
As far as I know its always been based on role, I wish this feature existed though!