Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Get certified in Microsoft Fabric—for free! For a limited time, the Microsoft Fabric Community team will be offering free DP-600 exam vouchers. Prepare now

Reply
cv2qm
Helper I
Helper I

RLS for Proxy users to see any employee data

Hello Community,

 

I implemented RLS with userprincipalname() and it went success.
Implemented with Active Directory users and Security groups, users can access only the data which they are assigned to.

 

Currently, my manager and rest of my team can't see others data. 

As I am the owner of the development i can see all employee data from Power BI Dataset from Security. 

But i have a requirement to implement proxy users to get access to any one of the employee. 

But i think userprincipalname() will restrict access when they try to login and want to see other employee data. 

 

Any suggestions how i can implement this ? 

 

Employee's -> A,B,C,D,E,F,G

Manager want access for - > Employee B

Team member 1 want Access for --> Employee D

 

RLS doubt.png

Thanks!

VCK

1 ACCEPTED SOLUTION
cv2qm
Helper I
Helper I

I am trying to fix this by DAX.

IF(USERPRINCIPALNAME() = CONTAINS('TEST RLS Proxy','TEST RLS Proxy'[Proxy UPN])),
Then-- Get UPN value assigned,
Else-- USERPRINCIPALNAME()

 

Thanks!

View solution in original post

3 REPLIES 3
cv2qm
Helper I
Helper I

I am trying to fix this by DAX.

IF(USERPRINCIPALNAME() = CONTAINS('TEST RLS Proxy','TEST RLS Proxy'[Proxy UPN])),
Then-- Get UPN value assigned,
Else-- USERPRINCIPALNAME()

 

Thanks!

V-pazhen-msft
Community Support
Community Support

@cv2qm 
RLS only works for Viewers. You can set the workspace role of the of manager and the team member to Members or Contributors. In this way they can access all employees data, then you can add a slicer of employees for them to selectively access employees data. 

 

Paul Zheng _ Community Support Team
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

parry2k
Super User
Super User

@cv2qm you have to manage a table with access rules and then use that for RLS instead of directly using USERPRINCIPALNAME in RLS.

 

I have written few blogs on RLS and that talks about how it works? Just go through it and see if that helps. you can check blogs at www.perytus.com/blog

 

 



Subscribe to the @PowerBIHowTo YT channel for an upcoming video on List and Record functions in Power Query!!

Learn Power BI and Fabric - subscribe to our YT channel - Click here: @PowerBIHowTo

If my solution proved useful, I'd be delighted to receive Kudos. When you put effort into asking a question, it's equally thoughtful to acknowledge and give Kudos to the individual who helped you solve the problem. It's a small gesture that shows appreciation and encouragement! ❤


Did I answer your question? Mark my post as a solution. Proud to be a Super User! Appreciate your Kudos 🙂
Feel free to email me with any of your BI needs.

Helpful resources

Announcements
OCT PBI Update Carousel

Power BI Monthly Update - October 2024

Check out the October 2024 Power BI update to learn about new features.

September Hackathon Carousel

Microsoft Fabric & AI Learning Hackathon

Learn from experts, get hands-on experience, and win awesome prizes.

October NL Carousel

Fabric Community Update - October 2024

Find out what's new and trending in the Fabric Community.