How to use DYNAMIC ROW-LEVEL-SECURITY (RLS) in Power BI // Beginners Guide to Power BI in 2021

[@JimmyDaMid]

I watched this video to understand RLS and especially about if someone got the dataset will the RLS still apply as you showed at the end, and literally the VERY NEXT DAY my boss asked this exact question. Thanks man, you made me look good

[@joserocha9400]

Thank you Fernan, I was havening problem with RLS after publishing what was pending was de Securit configuration on power bi service. You saved my day!

[@larshammer2552]

Great video about RLS. Beautifully and simple. It really gave me, what I needed about this.

[@SolutionsAbroad]

Thanks Lars!

[@easydanceexpress]

Great Video. Sorted out all questions we had on RLS in one go.

[@RRRR-yr4iu]

If one user is applied to all region, what will you do? Do you need to declare per line entry the region? Thanks

[@rohitrane8865]

Thanks bro for creating such a knowledge video Helped me a lot to apply RLS

[@Alan-ps2ul]

Thank you Fernan - Very clearly explained. I've applied your lesson to my real life work scenario and it worked 1st time! Brilliant!

[@nairobi203]

You make look everything so easy and understandable.

[@HakeemLawrence]

This was a very good explanation. Thank you for taking the time to do this.

[@SaleemAhmad-oh7qh]

Really nice. All the details are covered. Nice pace and good example.

[@emilymalkin270]

Superb explanation, Fernan! You are an amazing teacher ❤

[@ashishjuneja6574]

Fernan, you are awesome mate !! Super clear and precise. Great Job.

[@PallabIos642]

Hej fernan. Very nice video. i have followed all the steps but not found Apply security filter in both direction in modelling. i changed cross filter direction to both . now i am seeing that it filters first table(Permission table) but not those other tables.

[@Mahesh717]

The email you have usen there are your own email or you have written manually....

[@gregormalnaric9312]

Great. Helped me a lot.Thanks.

[@SolutionsAbroad]

You're welcome!

[@ermecejour]

NIce video.. Thank you! My question is why should we manually assign members to the role on the service (at 9:40 on the video) if it's a dynamic RLS? If it 's a big group should we manually enter all names?

[@SolutionsAbroad]

Hey Ernst, its dynamic because we define who is logged in based outside of the RLS, but for this to work we need to first assign roles to those people for this first bit to work. For this case I would suggest using a Distribution Group including everyone in your business, to avoid having to put all the names manually

[@ermecejour]

@@SolutionsAbroad thank you !! 👍i think the distribution group is the best approach. Keep up the good work . 👏

I really emjoy your videos! They are very helpful, thanks so much!

[@wjoanna5678]

Thanks for this great video. How can I add multiple users/emails to view the same region's data? For example, if I want to add Bob to view what John can view.

[@SolutionsAbroad]

Hi Joanna, in this case you'll need to add both Bob and John to have access to the same region

[@wjoanna5678]

Thanks for reply! I found my issue was due to relationships. Can this RLS apply to desktop usage? If I don't wish to publish to the web.

[@gfrylives]

Thanks for sharing the video. Instead of email addresses, is it possible to use AD Account names instead and UserName(). For some reason, this works for me locally but when deployed to the service it does not work

[@SolutionsAbroad]

Hi Jeff, that's because the USERPRINCIPALNAME when in the service, recognises their login to the service i.e. their email address. One way I addressed it in the past is to create a mapping table with IT with the email address and the AD account names. Hope that helps!

[@pahadianalyst]

Amazingly explained

[@TheVirtualmaverick]

I followed the same steps but when i am applying the email ID it changing the measure count. e.g. Department A, Department B = total value is 1000, but when i am applying against email same these two departments changing 1000 to some other value .what is that issue?

[@justapasserby69420]

Hi Fernan, thanks for the video and mabuhay from Manila. I have a question regarding the bi-directional cross-filtering: Can we substitute it with visual-level filters or is setting bi-directional cross-filtering a must to enable effective dynamic RLS? I'm just a little bit worried because bi-directional cross-filtering has been frowned upon by many experts that I watch and follow, especially SQLBI and GIAC. Thanks!

[@richardogoma]

Properly demonstrated

[@JometVJ]

Clearly explained; Thank you Fernan

[@brandonwimer481]

Great video, thanks for the help!

[@Lorena-cb3fs]

You are the best!

[@harshsadawana5924]

Thanks for this. Am I correct in assuming that user who we have provided dataset access will be able to refresh the dataset and visuals on the report with RSL applied?

[@alexandralinomanuel2948]

Amazing video! Thank you

[@mallikarjunb6143]

This video is too good to understand and implement the RLS feature both in the Power BI desktop and online Power BI service account. Thanks a lot.

[@SolutionsAbroad]

You're welcome, thanks for watching!

[@naveedahmed9785]

Is the "Now viewing as" in the power BI service based on users account or role?

[@SolutionsAbroad]

As far as I know its always been based on role, I wish this feature existed though!

[@kingsfordgokah6240]

Great Video

[@mondzcarte6356]

is it possible that the user may able to see the KPIs but not the table with detailed data?

[@mshanabar]

How this works if we have another column country/city level access restrictions

[@hassaantaj2106]

Thanks for the details session. I have tried it but i am getting error on the power BI web service where it says "unable to load model". Whats the preferred relationship between the main data table and table contained email addresses?

[@etherlords88]

When I test this from Test As Role, I can see data is being filtered however, when I land on the report, I see all the data, it's not filtered. Tried from the App, shared link for the report as well, it's not filtering. How do you properly test this that it's actually working rather than this method?

[@SolutionsAbroad]

Hi, if you're the dataset owner, RLS wont be applied for you, to test it properly you either have to: - Use another Power BI account to test - the "View As" role in Power BI Desktop

[@etherlords88]

@@SolutionsAbroad Thanks, also just found the other person should not be part of workspace, in short s/he has to be just viewer/consumer of that report! It's a bit gray instruction from MS but logically right, why rls if I already have full dataset access! Haha!

[@alexandralinomanuel2948]

@@etherlords88 I did have the same problem and it was because of this

[@shantelesorys4070]

Can anyone assist me? We have RLS per Group. We have a card visual with the group name. How do you get your visual to change (based on rls group) to show a short to long group name in the card? Or do you have an alternative solution?

[@alishaaiden8617]

Great explanation thx

[@Pinkpalmpufffyslay]

Hi Fernan, thanks for the great content. I need to set RLS on multiple criteria. Like Region and Product. How can I do that?

[@SolutionsAbroad]

Hi Sheik, I believe you'll need to create a product table in between region and user data, like in 2:47 then follow all the steps

[@Pinkpalmpufffyslay]

Thanks Farnan for your reply. It Means, for every added criteria an additional table is required, right?

[@Pinkpalmpufffyslay]

Can we automate updating the roles in Power BI service? Or, it’s always to be updated each time when we add/delete anything in the permission table?

[@mirrrvelll5164]

That would be my quesion too =)

[@ChandraSekhar-kb5gw]

Thats a great video!! Can you please cover page level security...

[@SolutionsAbroad]

Hi Chandra, there's currently no built-in way to deal with page security, but there are a few workarounds, I'll try to cover it in a video!

[@ChandraSekhar-kb5gw]

@@SolutionsAbroad Thanks

[@zinabutebeje6178]

Thank you for sharing and how can I create access for different users on different pages? please support

[@SolutionsAbroad]

Hi there, thanks for watching! Currently there's no way to separate different users access per page, a workaround could potentially be that you create a separate report with individual pages. You can use Shared Datasets to ensure you have one single data for all your reports, i covered it here: kzbin.info/www/bejne/rnXKqneOrtppfLM

[@zinabutebeje6178]

Thank you for swift reply and I will check the link

[@kothapalyamkiran0218]

Is anyone know when am checking one user the error show like Couldn't load the data for this visual The query encountered security filters on a table relationship that cannot be reconciled for the current user. Please contact your administrator or developer to review role memberships and security definitions. Please try again later or contact support. If you contact support, please provide these details.

[@legendgod]

The text you showed in video is blur. It would be helpful to provide a better resolution.

[@rakeshkumar-gr2fz]

how do we create the utc time query in power bi @solutions Abroad

[@SolutionsAbroad]

Hi Rakesh, There are different ways you can do this, for power query you can use DateTime.SwitchZone,or for DAX you can use UTCNOW. If you want something easier and report-wide, you might want tp consider changing the locale of your Power BI Desktop Hope that helps!

[@idng1908]

Excuse me, why did you checked the boxes for both “other user” and the RSL rule when testing on desktop? My RSL only works if I do that exact thing (checking both “other user” and the RSL but not in web

[@akanshrohal4429]

Covered all questions i had after reading the microsoft articles, you're a life saver, thanks !

[@Soulenergy31]

Again Thanks Fernand! 2:37 region table linked to emails 6:55 USER principal 8:17 publish it in PBI web service 8:51 see as others... Go to the data set!!!!!!!!!! 9:28 Sharing the report with John

[@JenMayB]

This is fantastic! Thank you so much! Question: can I combine static and dynamic RLS? I need to give some users access to everything so I’d like to just create a permission called “all” and assign them individually and then just have dynamic table for everyone else.

[@vishaljuneja3880]

I have 4 page report For Admin person or for the company for which I need to show report, I want to show all 4 pages with every data But there are investors in this company and from 4 pages 1 page is for Investor report so whenever any investor do login then that person should see only single page not others and just their data only This needs to be embed in company website or application. Not able to achieve from 1 month, can you guys help on this, that will be to most achievable solution for me than

[@sameerulhaq4066]

what if I say like I have 6 managers and each have their own assigned business line, region, customers, item code? How can I set that up?

[@davidlaid-ur9xn]

What if someone logins from an Email which is not present in the Permissions table, some other user from the organization. Will Dynamic RLS still work ? or will that user be able to view the full report ?

[@eli57398]

Hi guys the problem I am having is the username or principal name on power bi server needs an @ to register the data otherwise its blank. however on my network we assign permission via domain\myname so how would it work then?

[@Salmah9979sun]

Thank you so much for this wonderful channel, I'm working with PowerBI Report Server, I have implemented Row-Level-Security and created one role on which every employee shall be assigned. However, I have over 200 users using the reports. Is there a way to automatically assign every email adress of the users to this single role?

[@SolutionsAbroad]

Hi there, you'll have to manage this outside of Power BI to make it easier for you, something like this: kzbin.info/www/bejne/hGS7iH6Ji9SFebM

[@santoshsakalabaktula8135]

Please make a video on power bi paramter

[@SolutionsAbroad]

Thanks for watching, here's the video for parameters kzbin.info/www/bejne/aGmzdZd3aLiFhbc

[@psanders4754]

great stuff

[@kartikwat]

Good video. However, It's still based on offline data model. How would you do it for the AAD users on large scalable datasets..?

[@AmritaOSullivan]

Hello - i am following these steps but my data isn't filtering, i cant figure what i am doing wrong?

[@SolutionsAbroad]

Hi Amrita, dont forget to change your cross filtering to both AND tick the box for security filters, if your permissions table filters but not your other tables, this is the reason. Hope that helps!

[@AmritaOSullivan]

@@SolutionsAbroad hello thank you for replying, I do have the cross filter but it’s not giving me the option to tick the security box.

[@SolutionsAbroad]

@@AmritaOSullivan are you on the latest version of Power BI? It should be there as an option

[@AmritaOSullivan]

@@SolutionsAbroad hi yes I have may 2021 version.

[@datatalkshassan]

Why did you create an extra "Region" Table in the Data Model? Can we not directly attach User Data with Permissions Table on "Region"? It will create a Many-to-Many relation, true but it would work, no? Basically what I am asking is what's wrong in many-to-many relation in such a scenario?

[@belengallardo7370]

Thank you very much! It was a very useful video, a quick question. When publishing the report do you always have to add the users in the “Security” section of the dataset or is there a way to automate that? Thank a lot in advance :)

[@MankyHamster]

thanks so much for this video, really helped me!

[@ikeben400]

Why are you checking BOTH the "other user" box and the "permissions" box when trying to view as in powerBi desktop?

[@cheoles4190]

Thx you ! I was looking for this exact feature. The fact that the dataset published will keep the RLS configuration is super interesting !

[@hareeshg5808]

please make a video visual hiding for example :we have 3 visual ,user A can access 2 visuals, User B having access 1 visual , User C having all visuals ,if you do this it will help me a lot

[@bjorghooybergs1952]

Thank you! Super clear!

[@SolutionsAbroad]

Glad it helped!

[@khabir78]

Superb. I really love this but what if my data source is a Cube/Tabular Model

[@subhajyotibhattacharyya3416]

Great video and very helpful. Can we use rls and pls together using this procedure?

[@sameerkhan-zp1zb]

Thanks Bro, Your tutorial saved me :)

[@bronjan2013]

Thank you !!! This is what I needed !!!!

[@shivangitiwari8819]

How I can get the dataset ?

[@riazuddin7493]

Hi Fernan can you please tell me how can I insert a row in a Power BI Table by merging two or more columns, the sample is given below where "New Merged Column" is the one that I want to add by merging all columns A, B, C and D: Column A Column B Column C Column D Approved HC Actual Hiring Retirement December ------------------------------------------------------------------------------------ New Merged Column