RLS for Proxy users to see any employee data

[cv2qm]

Hello Community,

I implemented RLS with userprincipalname() and it went success.
Implemented with Active Directory users and Security groups, users can access only the data which they are assigned to.

Currently, my manager and rest of my team can't see others data. 

As I am the owner of the development i can see all employee data from Power BI Dataset from Security. 

But i have a requirement to implement proxy users to get access to any one of the employee. 

But i think userprincipalname() will restrict access when they try to login and want to see other employee data. 

Any suggestions how i can implement this ? 

Employee's -> A,B,C,D,E,F,G

Manager want access for - > Employee B

Team member 1 want Access for --> Employee D

Thanks!

VCK

[cv2qm · Accepted solution]

I am trying to fix this by DAX.

IF(USERPRINCIPALNAME() = CONTAINS('TEST RLS Proxy','TEST RLS Proxy'[Proxy UPN])),
Then-- Get UPN value assigned,
Else-- USERPRINCIPALNAME()

Thanks!

[V-pazhen-msft]

@cv2qm 
RLS only works for Viewers. You can set the workspace role of the of manager and the team member to Members or Contributors. In this way they can access all employees data, then you can add a slicer of employees for them to selectively access employees data. 

Paul Zheng _ Community Support Team
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[parry2k]

@cv2qm you have to manage a table with access rules and then use that for RLS instead of directly using USERPRINCIPALNAME in RLS.

I have written few blogs on RLS and that talks about how it works? Just go through it and see if that helps. you can check blogs at www.perytus.com/blog