Forum Discussion
RLS security groups
@syasmin25 PLEASE don't cross post!!
Sorry, having trouble following, would need to see data model and RLS rules.
Not really enough information to go on, please first check if your issue is a common issue listed here: https://community.powerbi.com/t5/Community-Blog/Before-You-Post-Read-This/ba-p/1116882
Also, please see this post regarding How to Get Your Question Answered Quickly: https://community.powerbi.com/t5/Community-Blog/How-to-Get-Your-Question-Answered-Quickly/ba-p/38490
The most important parts are:
1. Sample data as text, use the table tool in the editing bar
2. Expected output from sample data
3. Explanation in words of how to get from 1. to 2.
- syasmin256 years ago
Helper V
I am providing the sample here. I have a Manager's table,
EID Company Code Position UPN 5002 402 Manager [email protected] 5003 402 Manager [email protected] 5070 403 Manager [email protected] 5879 403 Manager [email protected] 4566 402 Manager [email protected] 4568 402 Manager [email protected] 4598 403 Manager [email protected] 4789 403 Manager [email protected] I have another table for visuals to demonstate the projects they are currently working on,
EID Company Code Projects 4568 402 4545-jk 4789 403 8585-res 4789 403 8585-res 4598 403 7898-kl 4789 403 8585-res 4568 402 4545-jk 4566 402 5056-qw 4568 402 4545-jk 4566 402 5056-qw 4598 403 7898-kl 4566 402 5056-qw 4598 403 7898-kl 4789 403 8585-res 4568 402 4545-jk 4566 402 5056-qw 4568 402 4545-jk 4566 402 5056-qw 4566 402 5056-qw 4598 403 7898-kl 4566 402 5056-qw 4789 403 8585-res 4598 403 7898-kl 4789 403 8585-res 4568 402 4545-jk 4568 402 4545-jk
As you can see the employees have different company codes here. I have connected both the tables for RLS based on their Company Code. However, they only have one security group which I added in both the security part on Power BI server and also on the share. So, when I share a report to company 402, company 403 has complete access to it. They can even access information that is for higher officials in 402 which employees in 402 cannot access. Since the company codes aren't the same, shouldn't their view show restricted data?