You want a security role SalesRegionManager to not see the Address column in SalesAddress. Which sequence of steps is correct in Tabular Editor?

You want a security role SalesRegionManager to not see the Address column in SalesAddress. Which sequence of steps is correct in Tabular Editor?

• A. Open the model in Power BI Desktop; Select the Address column; Set hidden True
• B. Open the model in Tabular Editor; Select Address column in SalesAddress; Set Object Level Security to None for SalesRegionManager
• C. Open the model in Tabular Editor; Set Object Level Security to None for SalesRegionManager; Select Address column
• D. Open the model in Power BI Desktop; Open the model in Tabular Editor; Select Address column; Set Object Level Security to None

Answer: (B)

The key idea is using object-level security to control visibility of specific objects for a given security role. To hide a column for a particular role, you must apply a security rule to that exact object (the Address column in the SalesAddress table) for the target role. In Tabular Editor, you start by opening the model and then navigate to the column you want to restrict. Once that column is selected, you configure the object-level security for the SalesRegionManager role on that column. This sequence ensures you’re applying the restriction to the correct object and role, resulting in SalesRegionManager not seeing that Address column. Using Power BI Desktop isn’t necessary for this task, and applying the security setting to the wrong object or in the wrong order wouldn’t achieve the desired outcome.

The key idea is using object-level security to control visibility of specific objects for a given security role. To hide a column for a particular role, you must apply a security rule to that exact object (the Address column in the SalesAddress table) for the target role.

In Tabular Editor, you start by opening the model and then navigate to the column you want to restrict. Once that column is selected, you configure the object-level security for the SalesRegionManager role on that column. This sequence ensures you’re applying the restriction to the correct object and role, resulting in SalesRegionManager not seeing that Address column. Using Power BI Desktop isn’t necessary for this task, and applying the security setting to the wrong object or in the wrong order wouldn’t achieve the desired outcome.