Override or Ignore Row Level Security for KPI Indicator

Question

We have a tabular field called [Gross Margin %] that we hide from end users using a security role in a tabular SSAS model

We have a KPI that color codes Red/Yellow/Green based upon [Gross Margin %]

We want the users to see the KPI colors, but not the related measure value at any level of drill through

Is there a way to allow users to see the KPI but not the base measure?

Answer 1

RLS doesn't offer special treatment for KPIs: if a row is secured, it is secured for each and every purpose. While your mention of securing a column seems to be rather about OLS than RLS, OLS is just as indiscriminate. Your only chance is to have an unsecured column with just the color values.

Answer 2

Hi @Maria Megnia ,
In theory, you can apply security only to tables and columns, not to measures. Measures are hidden if they have a dependency on a column or table that is hidden because of a security role. However, there is a way to hide a measure without hiding any of the tables and columns of the model: just create a hidden empty table that is not really used in any calculation, but that is referenced in an unused variable of the measure you want to hide. Then, hide that table, and the measure will be hidden, too.

You can also group measures from multiple tables into one table by creating an empty table, and then moving or create new measures into it.

Keep in-mind, you may need to include table names in DAX formulas when referencing columns in other tables.
Best Regards,
Joy

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.