Jump to content

Row Level Security Setup Guide: Difference between revisions

From PBI Reporting Wiki
Created blank page
 
No edit summary
Line 1: Line 1:
Power BI Row Level Security (RLS) Documentation


Sample Report: Global HAE Booking Summary Dashboard
Dataset: Email Reporting Dataset
Prepared by: PBI Team
Purpose: Control user access to report data based on database permissions.
 '''1.''' Purpose of This Document
This document outlines the '''Row Level Security (RLS) configuration and management process''' implemented in the Power BI Global HAE Booking Report.
The goal of RLS is to ensure that:
·        Users only see '''data relevant to their authorized databases'''.
·        Certain administrators have '''unrestricted access to all data'''.
·        Access is controlled securely and consistently across the company.
2. Overview of the RLS Design
The RLS model uses the user email identification to determine which data a user is allowed to see.
PowerBI identifies the logged in user using:
''USERNAME()''
The function returns the email address of the user who is currently accessing the report.
The system then applies DAX logic to determine the data that the user can view.
3. Access Categories
Users are divided into two access levels
·         Restricted Access Users
Unrestricted Access Users

Revision as of 16:11, 7 April 2026

Power BI Row Level Security (RLS) Documentation

Sample Report: Global HAE Booking Summary Dashboard

Dataset: Email Reporting Dataset

Prepared by: PBI Team

Purpose: Control user access to report data based on database permissions.


 1. Purpose of This Document

This document outlines the Row Level Security (RLS) configuration and management process implemented in the Power BI Global HAE Booking Report.

The goal of RLS is to ensure that:

·        Users only see data relevant to their authorized databases.

·        Certain administrators have unrestricted access to all data.

·        Access is controlled securely and consistently across the company.


2. Overview of the RLS Design

The RLS model uses the user email identification to determine which data a user is allowed to see.

PowerBI identifies the logged in user using:

USERNAME()

The function returns the email address of the user who is currently accessing the report.

The system then applies DAX logic to determine the data that the user can view.


3. Access Categories

Users are divided into two access levels

·         Restricted Access Users

Unrestricted Access Users