Forum Discussion

Pierrev31's avatar
Pierrev31
Frequent Visitor
2 years ago
Solved

Need help setting up Role using USERPRINCIPALNAME() with an extra parameter

Hello everyone!    I created a Role where a Partner could only see their own Engagements by using the USERPRINCIPALNAME() measure.    It is as follows: If he is a Lead Eng. Partner or and Eng. P...
Assigning Roles
Dynamic Role
Filter based on Roles
Security roles
USERPRINCIPALNAME
  • OwenAuger's avatar
    OwenAuger
    2 years ago

    Thanks Pierrev31 

    Yes that clarifies it!

     

    Here is how I would write the RLS filter expression assuming the table is named Engagements:

     

    VAR UPN =
    USERPRINCIPALNAME ()
RETURN
    CALCULATE (
        NOT ISEMPTY ( Engagements ),
        Engagements[Lead Eng Partner Email] = UPN
            || Engagements[Eng Partner Email]  = UPN
            || Engagements[Associate Partner Email] = UPN,
        ALLEXCEPT ( Engagements, Engagements[Lead Engagement] )
    )

     

    We only need to check the 2nd condition since it dominates the 1st condition. That is, if the current user exists on at least one row with the current row's Lead Engagement, then that user exists on the current row.

     

    Mock-up PBIX attached.

     

    Regards

OwenAuger's avatar
OwenAuger
Super User
2 years ago

Thanks Pierrev31 

Yes that clarifies it!

 

Here is how I would write the RLS filter expression assuming the table is named Engagements:

 

VAR UPN =
    USERPRINCIPALNAME ()
RETURN
    CALCULATE (
        NOT ISEMPTY ( Engagements ),
        Engagements[Lead Eng Partner Email] = UPN
            || Engagements[Eng Partner Email]  = UPN
            || Engagements[Associate Partner Email] = UPN,
        ALLEXCEPT ( Engagements, Engagements[Lead Engagement] )
    )

 

We only need to check the 2nd condition since it dominates the 1st condition. That is, if the current user exists on at least one row with the current row's Lead Engagement, then that user exists on the current row.

 

Mock-up PBIX attached.

 

Regards

Pierrev31's avatar
Pierrev31
Frequent Visitor
2 years ago

Hello! I think it worked! I'm testing right now, but so far it's perfect! If possible, could you explain how the ALLEXCEPT function worked here to do this? It would be great in case I face a similar problem in the future. Thank you very much!