Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
6 years ago
Solved

RLS if-statement on USERPRINCIPALNAME

Hi!   In my table of employees, the columns are [email], [IsTeamlead] and [country].    If a non-teamlead employee logs in, RLS should be [email] = USERPRINCIPALNAME (only see information about h...
Need Help
  • v-yingjl's avatar
    v-yingjl
    6 years ago

    Hi Anonymous ,

    In Manage roles, you can create new roles and try this DAX pression to solve your problem:

     

    IF (

        CALCULATE (

            COUNTROWS ( 'Table' ),

            FILTER ( 'Table', 'Table'[email] = USERPRINCIPALNAME () && [IsTeamlead] )

        ) > 0,

        [Country]

            = CALCULATE (

                MAX ( 'Table'[Country] ),

                FILTER ( 'Table', 'Table'[email] = USERPRINCIPALNAME () )

            ),

        [email] = USERPRINCIPALNAME ()

    )

     

    When you use View as roles, you will get the following result:

     

     

     

    Here is the demo , please try it:

    PBIX 

     

    Best Regards,

    Yingjie Li

     

    If this post helps then please consider Accept it as the solution to help the other members find it more quickly.

Anonymous's avatar
Anonymous
Not applicable
6 years ago

Thank you for your suggestion.

 

Every row (employee) has [email]. Your solution is a type Option A || Option B. Will Option B ever be evaluated if Option A is true? 

Anonymous's avatar
Anonymous
Not applicable
6 years ago

The statement will evaluate once for each row in the table. But if the first part evaluates to TRUE the second part is not evaluated for that row (since all users should have access to the row that contains their own email, right?).