Ignore RLS security on one page of the report

[kumsha1]

Hi,

We have a report with 2 tabs Overview, Department. RLS was implemented so that user logged in can only see their correspodning department data, however few users need to see all department data on Overview page. We have a table filter DAX in manage roles that filters out the user department. Can this filter be ignored at individual page level to get the desired results.

Ex: User sam belongs to department A and with current RLS setup he can only see A data on both tabs, can we ignore this filrer on Overview page, so sam can also view other departments data? but only see A department data on Department page. Both pages are populated from same table.columns / measures.

Thanks in advance for your help !

[Anonymous · Accepted solution]

Hi @kumsha1 ,

You cant ignore the RLS,but you can duplicate the table which acts like you can set 2 RLS for one report.It is a workaround.Steps see below:

Duplicate your report,then create the visuals you need.Set RLS in page1.Then hide the deplicated report.

See an example below:

I create a table and a visual as below:

Then I duplicate the table using below dax expression:

Table 2 = 'Table'

And set a RLS in page 1:

While testing you will see:

page 1page 2

For the related .pbix file,pls click here.

Best Regards,
Kelly

Did I answer your question? Mark my post as a solution!

[kumsha1]

 Hi Kelly,

I have tried this option and it works fine, however just wanted to check here if there is any oher option just to ignore the RLS at run-time. Most probably we will end up implemeting this option only. Thanks for your reply 🙂

Cheers,

[Anonymous]

Hi  @kumsha1 ,

Sorry to say that RLS acts like a report-level filter,it cant be ignored once it is running and it will applied in all pages.

 
Best Regards,
Kelly

Did I answer your question? Mark my post as a solution!

[amitchandak]

@kumsha1 , you may create a table, on which you do apply RLS filter ?

[AllisonKennedy]

RLS is designed to add security to the data, sounds like what you are wanting is just a filter. You can't ignore RLS on a page, but you can give Sam access to all departments using RLS and then put a filter on the Dept page that chooses Sam's department.

[kumsha1]

sounds like what i am trying to do, can you pls suggest what kind of filter will suffice the requirement in this case?. Thanks.

[AllisonKennedy]

The filter would look similar to what you had on RLS previously, but applied as a page level filter.