Question

You maintain a Power BI semantic model in a Fabric workspace that contains sales data for all regions. Regional managers must only see rows for their own region when they open the shared reports, but they should still be able to view every column and all report visuals otherwise. Multiple managers will connect to the same published report. What should you implement to enforce this requirement with the least administrative overhead?

Accepted Answer

Define row-level security (RLS) roles in the semantic model with DAX filters based on USERPRINCIPALNAME(), then assign managers to the roles.

Answer

Create separate copies of the report for each region and assign managers to their region's copy.

Answer

Apply object-level security (OLS) to hide the region column from managers who are not authorized.

Answer

Apply a sensitivity label to the semantic model to restrict which rows each manager can access.