Row level security multiple group memberships

[Anonymous]

Hi,

I am using RLS to filter what a logged in person can see but i am really struggling with the scenario where a person should be able to see more than one groups data. So far i am using this funcion which works fine when only one group is assigned to a user:

[Group] = (LOOKUPVALUE([Group],[User],USERPRINCIPALNAME()))

However, in the scenario below, when B is logged in B will only be able to see the data for group 1 as  the lookup function returns a single value. 

Name	Group
A	1
B	1
B	2
C	2

What to do? 

Best Regards

[Anonymous · Accepted solution]

Hi @Anonymous ,

Please try the formula as below and check if it can work well...

[Group]
    IN CALCULATETABLE (
        VALUES ( 'Table'[Group] ),
        FILTER ( 'Table', 'Table'[Email] = USERPRINCIPALNAME () )
    )

If the above one can't help you get the expected result, could you please provide some raw data in your tables (exclude sensitive data) with Text format and your expected result with backend logic and special examples? It would be helpful to find out the solution. You can refer the following links to share the required info:

How to provide sample data in the Power BI Forum

How to Get Your Question Answered Quickly

And It is better if you can share a simplified pbix file. You can refer the following link to upload the file to the community. Thank you.

How to upload PBI in Community

Best Regards

[amitchandak]

@Anonymous , the name should be joined with table having email (If bi-directional join, check security filter too)

Name - Email

Then create role

email = principalname()

How to use Row Level Security (RLS): https://youtu.be/NfdIA0uS6Nk