RLS functioning is username/ email is not present in the security table

Question

Hi All, Could you please help me with this scenario?&nbsp;If a user is present in the table, I want to implement the RLS based on logged in user using UPN/ Username(). If this user is not a part of the security table, he/she should see all the records, meaning the RLS itself shouldn't be applied/ a way to manage using the DAX in existing table. Could anyone help me tackle this scenario?

anonymous · Answer

Thank you Greg, I see what you're talking and I think I would need to create a separate role with no filtering and assign all the other users into this group.

Thanks for provding an opinion once again 🙂

Regards,

Jishnu

greg_deckler · Answer

Anonymous&nbsp;- I would generally not recommend that approach. I would create a seperate role for you other users and put them in the "all" role so to speak. Otherwise, the DAX could get messy or even impossible for the RLS. I really can't think of a way to do what you are asking in a single rule/role.

amitchandak · Answer

Anonymous , refer if these can help
https://community.powerbi.com/t5/Service/RLS-for-a-single-Data-Table-Query/td-p/120891
https://docs.microsoft.com/en-us/power-bi/guidance/rls-guidance#design-partial-rls

anonymous · Answer

Hi&nbsp;&nbsp;amitchandak,Yes, looks like the first url kind of brings me to the same solution that I could think of.&nbsp; The only constraint here is we have to find out all the users who're not a part of user dim table and assign them to the second security group &amp; looks like that is the only option available.&nbsp;Thanks for the suggestion Amit &amp; have a good one 🙂&nbsp;Regards,Jishnu&nbsp;&nbsp;

Forum Discussion

RLS functioning is username/ email is not present in the security table

4 Replies

Related content

Username function error

USERNAME() function DAX

USERNAME() function DAX

Role Level Security

Governance & Security