Skip to main content

Row-Level Security (RLS)

AtlasData fully respects Power BI RLS configurations.

How does it work?​

When a user accesses a report through AtlasData:

  1. The system identifies the user
  2. Generates an embed token with the user's identity
  3. Power BI applies RLS rules
  4. The user sees only permitted data

Configuring RLS​

RLS is configured directly in Power BI Desktop:

  1. Open the report in Power BI Desktop
  2. Go to Modeling > Manage roles
  3. Create security roles
  4. Define DAX filter expressions
  5. Publish the report

Testing RLS​

To test if RLS is working:

  1. In Power BI Desktop, use View as role
  2. In AtlasData, access as a restricted user
  3. Verify that data is filtered correctly

Best Practices​

  • Use USERPRINCIPALNAME() to filter by email
  • Test all roles before publishing
  • Document security rules