RLS: Users with multiple roles filter problem

Question

Hi all,&nbsp;&nbsp;I have a model with Companies and Departments. My requirement is to create RLS for both Companies and Departments and assign them to users. Some users need to have both roles appliead at the same time, ie, they are not allowed to see the entire Company, but their department only.&nbsp;While I can apply multiple roles to a user, the data displayed is not the intersection of these roles. What I can see is the addition of the roles.&nbsp;As an example, a user with RLS: Company A + Department B will see all Company A + Department B for all companies, which is not what I need.&nbsp;Is there a way to apply both roles restrictevly?&nbsp;Thanks&nbsp;

v-alq-msft · Answer

Hi,&nbsp;JVidal&nbsp;&nbsp;Basedon your description, I created data to reproduce your scenario.Table:&nbsp;If you create two roles as below, it won't display the&nbsp;intersection&nbsp;of two roles.&nbsp;&nbsp;Result:&nbsp;You need to put the rules in one role like below and then it will show the&nbsp;intersection of two rules.&nbsp;Result:&nbsp;Here is the&nbsp;pbix&nbsp;.&nbsp;Best RegardsAllan&nbsp;If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.&nbsp;&nbsp;&nbsp;

parry2k · Answer

JVidal&nbsp;you can surely achieve any logic in RLS, I have written few blogs on RLS , not directly solution to your problem but it explains how RLS works and you can implement it in your model. You can check blogs at this link.
&nbsp;
I would 💖&nbsp;Kudos 🙂 if my solution helped.&nbsp;

jvidal · Answer

Hi,&nbsp;&nbsp;Thanks for the link, I will have a look. Perhaps I should have mentioned that the roles come from different dimension tables. So I have Companies in one table and Departments in another table.&nbsp;Kind regards,

parry2k · Answer

JVidal&nbsp;sure here is the blog post that specific talks about use business rules to apply RLS.
&nbsp;
&nbsp;

jvidal · Answer

Hi&nbsp;parry2k&nbsp;I have read your post and I suspect you have all your data in 1 table and then your measure works, but if your filtering criteria is in different tables, I am not sure how to implement the measure.&nbsp;On the other hand, the example of your post is exactly what I want to avoid. I don't want users to see outside their company/department.&nbsp;So I have 3 case scenarios:- Users who can see the entire company -&gt; No issues here (RLS to filter Company)- Users who can see Department for all the companies -&gt; No issues here (RLS to filter Department)- Users assgined to a specific company and department -&gt; Issue is here as the current setup of applying two RLS roles is not applying correctly, as it will show the entire company and Department for all companies. It looks like the filter is applied with an OR statement instead of and AND statement.&nbsp;

Forum Discussion

RLS: Users with multiple roles filter problem

8 Replies

Related content

FILTERING PROBLEM

Filter problems

Problem with filters in Power Bi service

LastDate filter problem

Cross filtering problems