Security Matrix - Roles

Samir abdelmalek 21 Reputation points
2020-11-21T16:38:45.437+00:00

Hi Everyone,

I have a tabular cube that contains Dimension "Employee" which contains informations on the employees (first name, last name, full name,country ...), other Dimension "Region" that contains the geographical informations (region=>country=>city=>site),other dimensions and a single fact table "Calls".

41641-my-cube.png

I want to create a role as follow :
* i can see all the countries (when i select column country of Dim region), also when i select a measure from the fact table, i still can see the total of all countries.

41530-role-all-but-employee.png

  • the members of the role can see only the french data of the Dim employee (Employee.country = "France") when they select columns first name, last name, full name ... (see example below)

41643-emplyee-france.png

but they can see the total of the countries if they select the country column of Dim region without seeing employees of the other countries (see example below).

41642-only-french-data.png

Is there any solution for creating this role ? and if yes, how to proceed ?

SQL Server Analysis Services
SQL Server Analysis Services
A Microsoft online analytical data engine used in decision support and business analytics, providing the analytical data for business reports and client applications such as Power BI, Excel, Reporting Services reports, and other data visualization tools.
1,344 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Lukas Yu -MSFT 5,826 Reputation points
    2020-11-24T06:20:32.243+00:00

    Hi,

    For you need, normal Row Level Security would fit your scenario. I think you need to add another aggregate table to your model , with which user could see the total of other county but not the detail.

    You could follow the steps in this article : Calculating Total, and Percentages in a Row-Level Security Power BI Model

    Hope this would help.
    Regards,
    Lukas


    If the answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
    What can I do if my transaction log is full?--- Hot issues November
    How to convert Profiler trace into a SQL Server table -- Hot issues November


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.