RLS functioning is username/ email is not present in the security table

[Anonymous]

Hi All, Could you please help me with this scenario? If a user is present in the table, I want to implement the RLS based on logged in user using UPN/ Username(). If this user is not a part of the security table, he/she should see all the records, meaning the RLS itself shouldn't be applied/ a way to manage using the DAX in existing table. Could anyone help me tackle this scenario?

[amitchandak]

@Anonymous , refer if these can help

https://community.powerbi.com/t5/Service/RLS-for-a-single-Data-Table-Query/td-p/120891

https://docs.microsoft.com/en-us/power-bi/guidance/rls-guidance#design-partial-rls

[Anonymous]

Hi  amitchandak,

Yes, looks like the first url kind of brings me to the same solution that I could think of.  The only constraint here is we have to find out all the users who're not a part of user dim table and assign them to the second security group & looks like that is the only option available.

Thanks for the suggestion Amit & have a good one 🙂

Regards,

Jishnu

[Greg_Deckler]

@Anonymous - I would generally not recommend that approach. I would create a seperate role for you other users and put them in the "all" role so to speak. Otherwise, the DAX could get messy or even impossible for the RLS. I really can't think of a way to do what you are asking in a single rule/role.

[Anonymous]

Thank you Greg, I see what you're talking and I think I would need to create a separate role with no filtering and assign all the other users into this group.

Thanks for provding an opinion once again 🙂

Regards,

Jishnu