Get certified for free when you join Fabric Data Days 2026 and dive into Fabric, Power BI, SQL, AI, and other essential data skills.
Join nowData Days is here! Join us now for 60+ days of learning, challenges, and connection. Learn more
I am trying to learn and set up user permissions using dynamic RLS, yet can't seem to to get it working correctly. I've treid following the various samples (and videos) from google searches, but still stuck.
I'm currently working with 5 tables.
1. UsersTable, this contains a the email (UPN) and a 'SiteGroup'.
2. A "SiteGroups" Table. This is just a list of all the groups available.
3. A "SiteLists" Table. This lists all of the SiteTags associated with each group.
4. A "Dim Sites" Table that is a list of all SiteTags available.
5. A data table
Below is the general model showing the relationships.
I have setup a role called Permissions with the DAX of [email] = USERPRINCIPALNAME()
I can create a card and see the correct UPN of myself, and have changed the 'ViewAs" to another email address and see that card change as well.
But the data never filters down to only what the user should be able to see for their "SiteGroup"
I thinking/guessing this has maybe something to do with the data model and relationships?
Solved! Go to Solution.
In a default join (1:*) the filter only flows from the 1 to the many. You would have to make these two relationships bi-directional in order for your user table to filter the data table.
Sweet!!. That did the trick!!
In a default join (1:*) the filter only flows from the 1 to the many. You would have to make these two relationships bi-directional in order for your user table to filter the data table.
Don't miss out on Data Days, June 15 through August 7. Learn Fabric, Power BI, SQL, AI and more.
Check out the May 2026 Power BI update to learn about new features.
| User | Count |
|---|---|
| 23 | |
| 21 | |
| 20 | |
| 19 | |
| 13 |
| User | Count |
|---|---|
| 58 | |
| 50 | |
| 38 | |
| 31 | |
| 27 |