Forum Discussion
Dynamic row-level security
I have successfully created a role in Power BI to control access to the content of my report using the DAX script below: SWITCH( TRUE(), [SecuredAccessType] = "Full Access", 1=1, ...
Phil_PowerBI wrote:
To my surprise, it appears that my slicer selection does not get recognised as no matter how many times I change the selection, my role expression always resolve to the default value of my IF statement.
This is by design. Effectively the security role is assigned and the permissions are evaluated when the user first connects. This happens before any queries are run or any slicers are evaluated. You cannot make security an optional thing that users can switch on or off themselves, the security is always processed first so that there is no way the user can bypass it.
The only way to do what you want would be to put the users in the role with the most permissions and then put the switch logic in your measures.