Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Earn a 50% discount on the DP-600 certification exam by completing the Fabric 30 Days to Learn It challenge.

Reply
cv2qm
Helper I
Helper I

RLS for Proxy users to see any employee data

Hello Community,

 

I implemented RLS with userprincipalname() and it went success.
Implemented with Active Directory users and Security groups, users can access only the data which they are assigned to.

 

Currently, my manager and rest of my team can't see others data. 

As I am the owner of the development i can see all employee data from Power BI Dataset from Security. 

But i have a requirement to implement proxy users to get access to any one of the employee. 

But i think userprincipalname() will restrict access when they try to login and want to see other employee data. 

 

Any suggestions how i can implement this ? 

 

Employee's -> A,B,C,D,E,F,G

Manager want access for - > Employee B

Team member 1 want Access for --> Employee D

 

RLS doubt.png

Thanks!

VCK

1 ACCEPTED SOLUTION
cv2qm
Helper I
Helper I

I am trying to fix this by DAX.

IF(USERPRINCIPALNAME() = CONTAINS('TEST RLS Proxy','TEST RLS Proxy'[Proxy UPN])),
Then-- Get UPN value assigned,
Else-- USERPRINCIPALNAME()

 

Thanks!

View solution in original post

3 REPLIES 3
cv2qm
Helper I
Helper I

I am trying to fix this by DAX.

IF(USERPRINCIPALNAME() = CONTAINS('TEST RLS Proxy','TEST RLS Proxy'[Proxy UPN])),
Then-- Get UPN value assigned,
Else-- USERPRINCIPALNAME()

 

Thanks!

V-pazhen-msft
Community Support
Community Support

@cv2qm 
RLS only works for Viewers. You can set the workspace role of the of manager and the team member to Members or Contributors. In this way they can access all employees data, then you can add a slicer of employees for them to selectively access employees data. 

 

Paul Zheng _ Community Support Team
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

parry2k
Super User
Super User

@cv2qm you have to manage a table with access rules and then use that for RLS instead of directly using USERPRINCIPALNAME in RLS.

 

I have written few blogs on RLS and that talks about how it works? Just go through it and see if that helps. you can check blogs at www.perytus.com/blog

 

 



Subscribe to the @PowerBIHowTo YT channel for an upcoming video on List and Record functions in Power Query!!

Learn Power BI and Fabric - subscribe to our YT channel - Click here: @PowerBIHowTo

If my solution proved useful, I'd be delighted to receive Kudos. When you put effort into asking a question, it's equally thoughtful to acknowledge and give Kudos to the individual who helped you solve the problem. It's a small gesture that shows appreciation and encouragement! ❤


Did I answer your question? Mark my post as a solution. Proud to be a Super User! Appreciate your Kudos 🙂
Feel free to email me with any of your BI needs.

Helpful resources

Announcements
LearnSurvey

Fabric certifications survey

Certification feedback opportunity for the community.