Hi @himasha.abeywickrama 

Only few IFS delivered tabular models contain RLS filters out of the box. Is this question about using that bit or modelling new RLS filters into the tabular models?

You can find information about out of the box supported RLS in the following links.

https://docs.ifs.com/techdocs/24r1/050_reporting/600_analysis_models/030_security/#security_filtering_in_sql_server

https://docs.ifs.com/techdocs/24r1/050_reporting/600_analysis_models/035_setup/#ad_user_mappings

BR,

Subash

Hi @subashfestus,

Thanks for replying as always!

I would like to know more about modelling new RLS filters into tabular models.

Hi @himasha.abeywickrama 

Modelling new RLS filters can be done by using SSMS on the deployed tabular models, OR can use tools like visual studio analysis services projects, Tabular Editor OR any other supported tool.

You can find many online Microsoft documentation and other tutorials around how to add RLS filters to a tabular model.

https://learn.microsoft.com/en-us/analysis-services/tabular-models/roles-ssas-tabular?view=asallproducts-allversions

https://learn.microsoft.com/en-us/power-bi/connect-data/desktop-tutorial-row-level-security-onprem-ssas-tabular

https://docs.tabulareditor.com/te3/tutorials/data-security/data-security-setup-rls.html

https://techcommunity.microsoft.com/t5/sql-server-support-blog/dynamic-rls-support-for-analysis-service-tabular-model-based-on/ba-p/319166

Creating a static(hardcoded) RLS filter using a DAX expression like RegioniCountry]="USA" and adding members to that role is straight forward.

Once applied this will filter sales records for “USA” for the role members when the report was accessed.

If the requirement is to have the RLS in IFS application on the Tabular model, then the process is bit complex and following high level steps needs to followed.

Eg; Implement Site based RLS for the Sales tabular model

1. Identify the oracle view or table which contains the RLS data.

Eg – A view with sites accessible for each fnd_user

2. Create a view in IFSINFO schema to read from the object identified in step 01. (can use an IAL view or create a custom view from code)
3. Create a data source for that IFSINFO view, add that to the tabular model and create the relationships.

The steps mentioned in the below dimension example are similar to this process.

https://docs.ifs.com/techdocs/24r1/050_reporting/600_analysis_models/080_customconfig/050_exadddim/

4. Create a role and the DAX filter on “Site” table.
5. Add “AD user mappings”.

This is where the FND_Users are mapped to the AD users (Analysis Service works on windows auth)

https://docs.ifs.com/techdocs/24r1/050_reporting/600_analysis_models/035_setup/#ad_user_mappings

6. Add members to the role.

You can use the Company filter on the GL model as a guidance for this.

@subashfestus,

Thank you very much for this!