Object Level security with multiple roles

clayduvall · ‎10-30-2023

I added a few new columns to an Employee table. I only want a certain role "HR Administrators" to see those fields. It seems simple at first. All I need to do is set the Object Level Security on those fields to "Read" for the HR Administrators role and set it to "None" for the Main role. However, if a user is assigned to multiple roles, reports throw this error for that user "The combination of active roles results in a dynamic security configuration that is currently not supported." So basically the user can't be in one role where he has None for a field and another where he has "Read". This also happens when I try it at the table-level. This seems like a major shortcoming. I haven't been able to make any worthwhile use of object-level security for this reason. I simply want a main role where all users reside and cannot see HR data, and another role where users can be added for these additional fields. Is there a way to achieve this without making sure that users only belong to one role?

Thanks in advance for your help!

parry2k · ‎11-01-2023

You got it.

Subscribe to the @PowerBIHowTo YT channel for an upcoming video on List and Record functions in Power Query!!

Learn Power BI and Fabric - subscribe to our YT channel - Click here: @PowerBIHowTo

If my solution proved useful, I'd be delighted to receive Kudos. When you put effort into asking a question, it's equally thoughtful to acknowledge and give Kudos to the individual who helped you solve the problem. It's a small gesture that shows appreciation and encouragement! ❤

Did I answer your question? Mark my post as a solution. Proud to be a Super User! Appreciate your Kudos 🙂
Feel free to email me with any of your BI needs.

parry2k · ‎10-30-2023

@clayduvall I guess this will help.

Subscribe to the @PowerBIHowTo YT channel for an upcoming video on List and Record functions in Power Query!!

Learn Power BI and Fabric - subscribe to our YT channel - Click here: @PowerBIHowTo

If my solution proved useful, I'd be delighted to receive Kudos. When you put effort into asking a question, it's equally thoughtful to acknowledge and give Kudos to the individual who helped you solve the problem. It's a small gesture that shows appreciation and encouragement! ❤

Did I answer your question? Mark my post as a solution. Proud to be a Super User! Appreciate your Kudos 🙂
Feel free to email me with any of your BI needs.

clayduvall · ‎10-30-2023

Thank you for this information. So it looks like basically what I need is not supported. When implementing object level security a user must only belong to one role. Unfortunately that makes it pretty worthless in my opinion.