Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Find everything you need to get certified on Fabric—skills challenges, live sessions, exam prep, role guidance, and more. Get started

Reply
cv2qm
Helper I
Helper I

RLS for Proxy users to see any employee data

Hello Community,

 

I implemented RLS with userprincipalname() and it went success.
Implemented with Active Directory users and Security groups, users can access only the data which they are assigned to.

 

Currently, my manager and rest of my team can't see others data. 

As I am the owner of the development i can see all employee data from Power BI Dataset from Security. 

But i have a requirement to implement proxy users to get access to any one of the employee. 

But i think userprincipalname() will restrict access when they try to login and want to see other employee data. 

 

Any suggestions how i can implement this ? 

 

Employee's -> A,B,C,D,E,F,G

Manager want access for - > Employee B

Team member 1 want Access for --> Employee D

 

RLS doubt.png

Thanks!

VCK

1 ACCEPTED SOLUTION
cv2qm
Helper I
Helper I

I am trying to fix this by DAX.

IF(USERPRINCIPALNAME() = CONTAINS('TEST RLS Proxy','TEST RLS Proxy'[Proxy UPN])),
Then-- Get UPN value assigned,
Else-- USERPRINCIPALNAME()

 

Thanks!

View solution in original post

3 REPLIES 3
cv2qm
Helper I
Helper I

I am trying to fix this by DAX.

IF(USERPRINCIPALNAME() = CONTAINS('TEST RLS Proxy','TEST RLS Proxy'[Proxy UPN])),
Then-- Get UPN value assigned,
Else-- USERPRINCIPALNAME()

 

Thanks!

V-pazhen-msft
Community Support
Community Support

@cv2qm 
RLS only works for Viewers. You can set the workspace role of the of manager and the team member to Members or Contributors. In this way they can access all employees data, then you can add a slicer of employees for them to selectively access employees data. 

 

Paul Zheng _ Community Support Team
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

parry2k
Super User
Super User

@cv2qm you have to manage a table with access rules and then use that for RLS instead of directly using USERPRINCIPALNAME in RLS.

 

I have written few blogs on RLS and that talks about how it works? Just go through it and see if that helps. you can check blogs at www.perytus.com/blog

 

 



Subscribe to the @PowerBIHowTo YT channel for an upcoming video on List and Record functions in Power Query!!

Learn Power BI and Fabric - subscribe to our YT channel - Click here: @PowerBIHowTo

If my solution proved useful, I'd be delighted to receive Kudos. When you put effort into asking a question, it's equally thoughtful to acknowledge and give Kudos to the individual who helped you solve the problem. It's a small gesture that shows appreciation and encouragement! ❤


Did I answer your question? Mark my post as a solution. Proud to be a Super User! Appreciate your Kudos 🙂
Feel free to email me with any of your BI needs.

Helpful resources

Announcements
Europe Fabric Conference

Europe’s largest Microsoft Fabric Community Conference

Join the community in Stockholm for expert Microsoft Fabric learning including a very exciting keynote from Arun Ulag, Corporate Vice President, Azure Data.

Power BI Carousel June 2024

Power BI Monthly Update - June 2024

Check out the June 2024 Power BI update to learn about new features.

PBI_Carousel_NL_June

Fabric Community Update - June 2024

Get the latest Fabric updates from Build 2024, key Skills Challenge voucher deadlines, top blogs, forum posts, and product ideas.

Top Solution Authors