Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
2 years ago

Row Level Security - only allow certain users

Hello,

 

How can I set RLS to only allow specific users.  Ideally I'd like to allow only managers to view only their data, which I can do with username.  However I'd also like to allow some specific people to view everyone's data.   How do I allow both...and if I can't, I'd rather have it where those specific people can view everyone's data

2 Replies

  • lbendlin's avatar
    lbendlin
    Super User
    2 years ago

    Remember that if you have conflicting RLS rules applied to the same user then the more permissive rule wins.

     

    Create a Role where the RLS rule simply states "TRUE()"  and put these people under that role.

  • Anonymous's avatar
    Anonymous
    Not applicable
    2 years ago

    Hi Anonymous ,

    In Power BI, you can achieve your desired Row-Level Security (RLS) setup by creating different roles with specific filters.

     

    You can create two roles like Basic User Role and Head Office Role. 

    Basic User Role filters data based on the user’s department, Head Office Role can create a second role with no filters. Add the head office users to this role in PowerBI.com. They will be able to view all data unrestrictedly.

     

    Also if you don’t have a security group for head office users, you can keep all settings in Power BI Desktop, then you can use a DAX filter in the RLS.

    All Users Role =
VAR _Role =
    MAXX (
        FILTER ( UsersTable, UsersTable[UserEmail] = USERNAME () ),
        UsersTable[Department]
    )
RETURN
    IF ( _Role = "Head Office", TRUE (), [UserEmail] = USERNAME () )

    You can read this topic for a further study: Solved: RLS - Allow certain users to see all. - Microsoft Fabric Community

     

     

     

    Best Regards

    Yilong Zhou

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.