If you have painful and sensitive analysis in your Electricity BI dataset your must stop certain users viewing the information in some articles otherwise steps. It is really not enough to ban those people strategies or columns from the account or perhaps to mask her or him, since there remain implies having enterprising profiles observe investigation it must not be allowed to come across. Thankfully that there’s today ways to perform one report linked to good dataset that have OLS and now have they monitor different articles and you can strategies to pages with assorted permissions.
Now what if that the target and extra study is merely getting visually noticeable to Time and everybody otherwise will be only be in a position observe brand new labels and conversion process opinions. Once i told you, the only method to do this is to try to manage a job using OLS so you’re able to deny the means to access the brand new address and you can extra columns. Gilbert Quevauvilliers have a great post demonstrating how-to install OLS having fun with Tabular Publisher here so i wouldn’t enter into outline about how to accomplish that, but here’s how I configured the role when you look at the Tabular Publisher step 3:
But the problem with OLS up until now would be the fact they failed to play as well with Strength BI reports and that means you got to manufacture numerous sizes of the identical report a variety of safeguards spots
For people who publish the fresh new statement and test the new part about browser, vidД›t to tady you will observe that you will get a beneficial “The latest artwork provides unrecognized areas” error since dining table in the statement spends the Address and you can Extra sphere and this, of course, an individual don’t supply of the OLS:
Shelter is being employed as requested but would it be good in the event the, in place of viewing a mistake here, you might make a single declare that screens most of the sphere in the event that member enjoys permission observe him or her and simply displays title and you will Sales areas to users who are members of new part having OLS applied?
Better, it’s simple to due to the the latest industry details ability. The fresh designed use of job details will be to let the stop pages of your own records to select the areas displayed for the design using an effective slicer. Behind-the-scenes once you manage an area parameter a desk was added to the dataset having you to definitely row for each community you have opted; it effectively makes the areas utilized in an artwork data-determined, and you may have fun with Row Peak Coverage (RLS) up for grabs made for their community parameter to handle hence fields is demonstrated on your artwork and you can resolve the problem.
Returning to our very own report, the next phase is to make a different community factor which have most of the columns and measures utilized in the new desk:
Note that brand new “Add slicer to this webpage” checkbox is deselected because you don’t need an excellent slicer into the report here. Here is what brand new dining table created for the field factor works out:
Then you can modify new character one already have OLS during the it to make use of RLS on job factor table, so just the rows on fields that will be acceptance of the new OLS are returned:
It’s important the OLS and RLS are defined on the same character by the maximum on the consolidating OLS and RLS off additional opportunities.
You should be concerned that OLS is still protecting the fresh new data here – new RLS is steering clear of the errors.
One to drawback regarding the method is one one thing gets difficult if you have numerous graphics that require showing additional combos out-of covered and you can low-secure industries in the a study. There might also be a performance punishment: when a visual uses an area factor an extra DAX query is operate on the field parameter table to determine the industries to demonstrate, even though these types of requests shall be very quickly all the go out there is always a risk that they in some way sluggish the declaration down.