Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Be one of the first to start using Fabric Databases. View on-demand sessions with database experts and the Microsoft product team to learn just how easy it is to get started. Watch now

Reply
hyreddy_016
Microsoft Employee
Microsoft Employee

Measure referring to a column restricted using Column Level Security

I have a use case where I need to evaluate a count based on the column filtered in a report. If the visuals are sliced using A or B, the count should evaluate to 0 else 1.
Following are more details.

I am using the DAX formula , Limit:=IF(OR(ISFILTERED(table[A]),ISFILTERED(table[B])),0,1) 

There are two Roles added 1) Read 2) Restricted . Read has access to all the columns. Restricted doesn't have access to columns A and B. In that case I want the limit to be picked up as 1. But currently, the measure it self is getting restricted for the Restricted role.

Is there any way this measure works as per the expected behavior? Any help is highly appreciated. Thanks!

6 REPLIES 6
daxer-almighty
Solution Sage
Solution Sage

Personally, I think you CAN'T have a measure, which uses restricted columns, return a value for a role that does not have access to the columns/tables. But I may be incorrect as I'm not a specialist in this topic. You could try to ask Alberto Ferarri or Marco Russo. Or Chris Webb. They'll know much more on this than I do.

Thanks @daxer-almighty , is there any other way we can acheive this functionality? Without using the restricted columns in the measure directly? Like same using Row Level Security instead of column level security.

hyreddy_016
Microsoft Employee
Microsoft Employee

Any leads on this is highly appreciated. Thanks in advance!

amitchandak
Super User
Super User

@hyreddy_016 , you need to add condition for role or username in this

Join us as experts from around the world come together to shape the future of data and AI!
At the Microsoft Analytics Community Conference, global leaders and influential voices are stepping up to share their knowledge and help you master the latest in Microsoft Fabric, Copilot, and Purview.
️ November 12th-14th, 2024
 Online Event
Register Here

Hi @amitchandak , the role member is an azure active directory group and not individual user. Hence I can not add the user related condition in the query. I have added the role name, even then this measure is getting restricted. Could you please provide an example?

Is there a way we can verify for role membership in a measure using DAX?

Helpful resources

Announcements
Las Vegas 2025

Join us at the Microsoft Fabric Community Conference

March 31 - April 2, 2025, in Las Vegas, Nevada. Use code MSCUST for a $150 discount!

Dec Fabric Community Survey

We want your feedback!

Your insights matter. That’s why we created a quick survey to learn about your experience finding answers to technical questions.

ArunFabCon

Microsoft Fabric Community Conference 2025

Arun Ulag shares exciting details about the Microsoft Fabric Conference 2025, which will be held in Las Vegas, NV.

December 2024

A Year in Review - December 2024

Find out what content was popular in the Fabric community during 2024.