Forum Discussion
Dynamic RLS
Hi osaz_nero ,
You are correct that Dynamic RLS eliminates the need to hardcode or maintain user filters within DAX. However, users still need to be granted access to the appropriate role. Dynamic RLS controls data visibility after authorization but Power BI requires users to be assigned to an RLS role either directly or via an Entra ID security group.
To streamline user management it is best to assign a security group to the RLS role and manage group membership as needed. This way Dynamic RLS will automatically filter data for each user based on their email without requiring DAX updates when Directors or Assistant Directors change.
Thank you.
Super UserHi osaz_nero ,
The rule you shared looks correct for restricting access based on Director and Assistant Director emails. To also allow special users full visibility, you can extend the condition with an additional or clause that checks against a list or table of privileged emails. This way, hierarchy-based filtering is preserved while exceptions are handled cleanly. Using a separate table for special users makes it easier to maintain without editing the DAX each time.
Thanks,
Sai Teja