Question

A Fabric Analytics Engineer manages a shared semantic model that contains a measure called [Net Profit Margin]. Executive users must see this measure, but a group of regional analysts assigned to a dedicated security role must not be able to see it or query it at all. The engineer wants to hide the measure from these analysts while keeping all other measures available to them. Which approach should the engineer use?

Accepted Answer

Configure object-level security (OLS) in the semantic model to deny the analyst role access to the [Net Profit Margin] measure using an external tool such as Tabular Editor.

Answer

Create a dynamic row-level security (RLS) rule that filters the fact table rows contributing to [Net Profit Margin] for the analyst role.

Answer

Apply a sensitivity label to the [Net Profit Margin] measure so the analyst role cannot decrypt it.

Answer

Set the measure's display folder to hidden and remove Build permission from the analyst role.