RLS Override

[lherbert501]

Hi,

I have been using the PATHCONTAINS and USERPRINCIPAL model for user and manager hierarchy which works great for RLS, similar to the link below but the user and manager id's set up against each other

power bi rls hierarchy - Google Search

My question is, is there a way to overide this function in place that's working perfectly? I have some scenarios where I will need to enable a user to see all upon request, and didn't know if there was something I could do or put in place.

Thanks

[Zanqueta]

Hi,  you are already using the correct and recommended pattern for hierarchical Row-Level Security (RLS) in Power BI with PATHCONTAINS() and USERPRINCIPALNAME(). There is no need to replace or disable this logic in order to allow specific users to see all data.
What can work in this case is to add an override condition to the existing RLS rule, while keeping the current hierarchy behaviour unchanged for all other users. You can extend the existing rule by adding a condition that returns full access for specific users.
This approach is suitable when:

Only a small number of users require full access
The requirement is occasional or temporary

However, this solution does not scale well and requires manual updates to the DAX.

My suggestion is to create a small security table containing users who should bypass RLS (for example, executives).

The RLS logic then checks whether the current user exists in this table. If so, all rows are visible; otherwise, the hierarchy-based rule applies

VAR IsSuperUser =

    USERPRINCIPALNAME()

        IN VALUES ( RLS_Override[Email] )

RETURN

IF (

    IsSuperUser,

    TRUE(),

    PATHCONTAINS ( 'Employee'[Path], USERPRINCIPALNAME() )

)

Also, you can check this solved topic : Solved: Re: Override RLS - Microsoft Fabric Community